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Power  outages,  fires, 
floods  and  terrorism 
are  near-constant 
threats  for  today’s  IT- 
dependent  businesses.  Plus,  the 
coming  hurricane  season  is  expected 
to  be  worse  than  usual.  Here’s 
how  to  get  ready.  Stories  begin 
on  Page  33. 


Online  txciusive: 


Real  disaster  tales  from  the  Shark  Tank  archives: 
'  QuickLink  45762  j  www.computerworld.com 
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Microsoft  Draws  User  Ire  With 
Its  Latest  Release  of  Patches 


Frustration  mounts 
as  users  struggle  to 
install  numerius  fixcB 

BY  JAIKUMAR  VIJAYAN 

Microsoft  Corp.’s  release  last 
week  of  three  critical  patches 
to  fix  20  flaws  in  various  Win¬ 
dows  products  drew  flak  from 


users  who  expressed  frustra¬ 
tion  at  the  company’s  continu¬ 
ing  problems  with  security. 

In  one  of  its  biggest  month¬ 
ly  patch  releases  to  date,  Mi¬ 
crosoft  issued  updates  aimed 
at  closing  several  major  holes 
in  products  ranging  from  Win¬ 
dows  NT  4.0  to  the  64-bit  edi¬ 
tion  of  Windows  Server  2003. 


Also  affected  were  several 
versions  of  its  Outlook  Ex¬ 
press  e-mail  program. 

One  of  the  patches  fixed  14 
separate  vulnerabilities;  an¬ 
other  fixed  four. 

“We  are  extremely  con¬ 
cerned  by  the  high  amount  of 
vulnerabilities  and  patches 
from  Microsoft.  This  goes 
against  the  credibility  of  what 
they  have  been  saying,”  said 
Michael  Kamens,  global  secu¬ 
rity  director  at  Thermo  Elec¬ 
tron  Corp. 

The  fact  that  even  a  new 
product  such  as  Windows 
Server  2003  has  problems 
“brings  no  great  joy  to  our 

Patches,  page  51 


INSIDE  Linux  vendors  claim 
Forrester  report  on  security  was 
biased  in  favor  of  Microsoft.  PAGE  51 


Best  Buy  to 
Outsource  IT 
To  Accenture 

IT  head  count  expected  to  drop  from  820  to  40 
as  retailer  stresses  agility  over  customization 


BY  CAROL  SLIWA 

In  an  uncommon  move  in  an 
industry  that  usually  takes  a 
selective  approach  to  out¬ 
sourcing,  retailer  Best  Buy  Co. 
last  week  confirmed  its  inten¬ 
tion  to  outsource  all  of  its  IT 
operations  to  Accenture  Ltd. 

Richfield,  Minn.- 
based  Best  Buy  cur¬ 
rently  employs  820 
people  in  its  IT  depart¬ 
ment  but  said  it  ex¬ 
pects  only  40  to  re¬ 
main  with  the  compa¬ 
ny  if  it  reaches  a  final  agree¬ 
ment  with  Accenture. 

Best  Buy  spokeswoman 
Dawn  Bryant  said  that  those 
40  will  oversee  IT  strategy 
and  manage  the  relationship 
with  Accenture.  About  650  IT 
employees  are  expected  to  re¬ 


ceive  comparable  job  offers 
from  the  management  and 
technology  consulting  firm. 

Best  Buy  last  week  notified 
the  other  130  IT  employees 
that  their  positions  are  being 
eliminated.  Bryant  said  the 
employees  will  remain  on  the 
payroll  for  60  days, 
after  which  they  will 
receive  severance 
packages. 

Bryant  said  posi¬ 
tions  are  being  elimi¬ 
nated  in  areas  of  re¬ 
dundancy,  and  she  stressed 
that  job  performance  wasn’t  a 
factor  in  the  decision-making 
process.  “It’s  about  needing  to 
be  really  efficient  as  an  organi¬ 
zation  and  being  able  to  react 
to  changing  business  needs,” 

Best  Buy,  page  14 
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Effort  Afoot  to 
Exempt  20k 
From  H-1B  Cap 

Bill  would  allow  hiring 
of  more  foreign  grads 
with  advanced  degrees 

BY  PATRICK  THIBODEAU 

WASHINGTON 

There’s  a  new  push  in  Con¬ 
gress  to  increase  by  20,000  the 
number  of  foreign  workers 
holding  H-1B  visas.  Proposed 


HI 


See  our  H-1B 
special  cover¬ 
age  page: 

.QuickLink  ? 
s14(30 


visa  cap. 

The  bill,  introduced  earlier 
this  month  by  Rep.  Lamar 
Smith  (R-Texas),  is  supported 
by  Compete  America,  a  co¬ 
alition  of  manufacturers,  aca¬ 
demic  groups  and  IT  vendors 
such  as  Microsoft  Corp.,  In¬ 
tel  Corp.,  Oracle  Corp.,  and 
H-1B,  page  14 


legislation 
would  accom¬ 
plish  that  by  ex¬ 
empting  foreign 
graduates  with 
advanced  de¬ 
grees  from  the 
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Introducing  the  new  Microsoft  Office  System. 

Now  users  can  do  more  for  themselves  so  you  can  focus 
on  the  important  things.  More  than  just  the  core  suite 
you're  familiar  with,  the  new  Microsoft®  Office  System  is 
an  integrated  system  of  easy-to-use,  expanded  programs, 
servers,  services,  and  solutions  that  help  end  users  be 
more  self-sufficient.  With  Microsoft  Office  Professional 
Edition  2003,  Microsoft  Windows®  SharePoint™  Services, 
and  Microsoft  Office  SharePoint  Portal  Server  2003,  end 
users  will  have  the  ability  to  create  and  manage  their 
own  team  work  spaces.  So  not  only  will  they  be  able 
to  collaborate  and  share  information  easily  and  more 
securely,  but  you'll  be  free  to  do  what  you  really  need  to 
do.  To  find  out  how  the  Microsoft  Office  System  can 
work  for  you,  go  to  microsoft.com/officelT 


Microsoft 
Office  System 

More  than  what  it  used  to  be,  it's  now  a 
comprehensive,  customizable  system. 

Programs 

Servers 

Services 

Access  2003 

Excel  2003 
Frontpage®  2003 
InfoPath™  2003 
OneNote™  2003 
Outlook®  2003 

PowerPoint®  2003 
Project  2003 
Publisher  2003 

Visio®  2003 

Word  2003 

Project  Server  2003 

Live  Communications 
Server  2003 

Exchange 

Server  2003 

SharePoint™  Portal 
Server  2003 

Live  Meeting 

Office  Online 

Solutions 

Solution  Accelerators 

Enabling  Technologies: 

Windows  Server™  2003,  Windows®  SharePoint  Services, 
Rights  Management  Services 
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in  the  West  who's  holding 


fast  to  fasting  while  he  fast- 


That  fast. 


BrightStor®  ARCserve®  Backup  Release  11 

Faster  and  easier  to  use  than  ever. 

When  it  comes  to  data  backup  and  recovery,  you  want  a  reliable,  high-performance  solution  you 
can  count  on.  That's  why  we've  created  BrightStor  ARCserve  Backup  Release  11,  featuring  the 
very  latest  in  storage  innovations.  BrightStor  ARCserve  Backup  is  faster  and  easier  than  ever, 
enhancing  both  efficiency  and  productivity.  And  with  CA's  superior  technology,  you  can  be 
confident  your  files  are  properly  backed  up  and  will  easily  be  restored  should  a  disaster  occur. 
For  more  information,  go  to  ca.com/storage/arcserve. 


FREE 

TRIAL 


Free  trial  of  BrightStor 
ARCserve  Backup  Release  11. 
Visit  ca.com/storage/arcserve 
or  call  1-866-558-2798. 
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IT  Drives  the  UPS  Machine 

In  the  Management  section:  The  UPS  World- 
port  hub  in  Louisville,  Ky.,  uses  $100  million 
of  homegrown  software  to  manage  automatic 
sorting  of  almost  a  million  packages  a  day.  The 
system  also  helps  reduce  manual  labor  and 
increases  employee  retention.  Page  27 
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Seeing  Voices 

In  the  Technology  section:  Voice- 
over-IP  monitoring  tools  are 
getting  better  at  maintaining 
harmony  across  even  large-scale 
converged  networks.  Page  21 
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gests  General  Electric  as  a 
structural  model  for  the 
intelligence  community. 

5  CEO  Sanjay  Kumar  comes 
under  scrutiny  for  his  possible 
role  in  Computer  Associates’ 
accounting  scandal. 

5  Oracle’s  JDeveloper  10g  tool 
aims  to  make  development 
easier  for  programmers  who 
aren’t  familiar  with  Java. 

8  Microsoft  considers  “margin¬ 
al”  changes  to  Longhorn. 

10  MySQL  plans  to  add  cluster¬ 
ing  support  to  its  open-source 
database. 

10  The  Seattle  Mariners  shut  out 
spam  with  e-mail-blocking 
technologies. 

12  McDonald’s  adds  Wi-Fi  to  its 

menu,  with  provider  Wayport 
supporting  business  applica¬ 
tions  as  part  of  the  deal. 

12  Q&A:  David  Yen  explains 
Sun’s  decision  to  stop  devel¬ 
oping  two  processors. 
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What’s  a 
QuickLink? 

0  On  some 
pages  in  this  issue, 
you'll  see  a  Quick- 
Link  code  pointing 
to  additional,  relat¬ 
ed  content  on  our 
Web  site.  Just  en¬ 
ter  that  code  into 
our  QuickLink  box, 
which  you’ll  see  at 
the  top  of  each 
page  on  our  site. 


tool  that  CIOs  use  to  monitor 
operations  could  be  used  by 
CFOs  to  watch  them. 

18  Maryfran  Johnson  writes  that 
preparing  for  postdisaster  re¬ 
covery  operations  isn’t  too 
hard,  and  it  doesn’t  cost  a  lot. 
So  why  aren’t  you  doing  it? 

18  Pimm  Fox  says  companies 
that  aren’t  in  the  IT  business 
should  pull  the  plug  on  their 
IT  departments.  That’s  what 
H&R  Block  did. 

19  Thornton  A.  May  has  found 
that  your  direct  reports  con¬ 
sist  of  fully  qualified  leaders 
and  various  less-qualified 
types.  You  need  to  identify 
the  ones  to  invest  in. 

26  Robert  L.  Mitchell  says  online 
reservations  systems  show  the 
complexity  of  delivering  end- 
to-end,  real-time  data  access. 

30  Barbara  Gomolski  advises  IT 
to  revamp  its  processes  to  im¬ 
prove  efficiency  and  customer 
service. 

52  Frankly  Speaking:  Frank 
Hayes  says  Ronald  McDonald 
can  teach  you  a  few  lessons 
about  how  to  creatively  apply 
Wi-Fi  to  your  business. 
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Preparing  for  the  Worst 

The  risks  are  piling  up.  This 
special  report  provides  peer- 
tested  tips  for  keeping  your 
business  running  during  the 
most  common  disasters  and 
avoiding  classic  mistakes 
when  making  disaster  recov¬ 
ery  plans.  And  don’t 
forget  to  check  up 
on  your  suppliers! 
PACKAGE  BEGINS  ON  PAGE  33. 
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34  Rising  From  Disaster. 

Users  such  as  Joe  Torres, 
disaster  recovery  coordi¬ 
nator  for  Miami-Dade 
County  (left),  offer  tips  to 
keep  systems  running 
during  a  variety  of 
disasters. 


36  Classic  Mistakes.  Because 
disaster  planning  takes  a 
back  seat  to  other  IT  proj¬ 
ects  in  almost  all  companies, 
mistakes  are  bound  to  happen. 


Here  are  five  common  slip-ups  in 
disaster  recovery. 

38  Get  in  Sync  With  Suppliers. 

A  disaster  for  your  trading 
partners  could  mean  a  dis¬ 
aster  for  you.  Here’s  how 
to  determine  whether 
your  supply  chain 
partners  are 
prepared. 

39  A  Dose  of  Reali¬ 
ty.  Experts  offer 
tips  for  conducting  disaster 
recovery  tests.  For  example,  hold 
“real-world”  tests  of  your  organi¬ 
zation’s  most  critical  systems  at 
least  once  a  year. 

40  The  Almanac:  Y2k 

was  a  mixed  bag  for  the 
disaster  recovery  field:  It 
raised  awareness,  but  suc¬ 
cessful  Y2k  remediation 
efforts  led  to  credibility  problems 
and  complacency.  Also:  VXA  data 
tapes  can  withstand  coffee  spills. 

41  Opinion:  Dear  old  Mom  said  to 
expect  the  worst.  That’s  good 
advice  for  managing  disaster 
recovery  efforts  with  your  out¬ 
sourcers,  says  columnist  Mark 
Hall.  Plus,  results  from  Com- 
puterworld’ s  survey  of  IT  profes¬ 
sionals  on  disaster  recovery  issues. 


Book  Excerpt. 

Companies  tend  to 
overlook  a  key  task 
when  developing 
business  continuity 
plans,  says  author 
Jon  William  Toigo. 

0  QuickLink  45741 

Business  Continuity 
Checklist.  Two  Avan- 
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ade  consultants  offer 
steps  you  can  take  to 
create  —  and  main¬ 
tain  —  successful  dis¬ 
aster  recovery  plans. 
0  QuickLink  45544 

Wild  Weather.  An  it 

manager  recalls  how 
his  company  recov¬ 
ered  after  flooding 


took  out  storage,  pow¬ 
er  and  phone  lines- 

0  QuickLink  45884 

Survivor’s  Guide. 

Dell’s  Praveen 
Asthana  offers  sugges¬ 
tions  for  recovering 
data  in  the  event 
of  a  disaster. 

0  QuickLink  45852 


4  COMPUTERWORLD  April  19, 2004 


NEWS 


www.compulerworld.com 


9/11  Commission  Eyes 
GE  as  Intelligence 
Community  Model 


Structural  overhaul  of  agencies  focuses  on 
centralized  control,  IT-enabled  workforce 


BY  DAN  VERTON 

WASHINGTON 

ast  week,  a  member 
of  the  independent 
commission  investi¬ 
gating  the  Sept.  11, 
2001,  terrorist  attacks  put  CIA 
Director  George  Tenet  on  no¬ 
tice  that  massive  structural 
change  is  on  the  way  for  the 
U.S.  intelligence  community 
and  that  when  it’s  finished,  the 
CIA  hierarchy  may  look  more 
like  General  Electric  Co.’s  than 
a  typical  spy  agency’s. 

Former  Navy  Secretary  John 
F.  Lehman  told  Tenet  during 
an  April  14  hearing  that  the 
U.S.  intelligence  community 
faces  “an  IT  problem”  stem¬ 
ming  from  a  “deep,  embedded, 
functional  [lack]  throughout 
the  community  of  common 
protocols  for  information.” 

One  of  the  steps  the  com¬ 
mission  may  take  to  fix  that 
problem,  said 
Lehman,  is  to 
force  the  CIA 
and  other  agen¬ 
cies  to  adopt  the 
GE  corporate 
model,  which  is 
based  on  a  small, 
centralized  senior  manage¬ 
ment  team  that’s  surrounded 
by  IT-enabled  functional  de¬ 
partments.  “[That]  is  the  mod¬ 
el  that  is  beginning  to  take 
shape  in  our  mind,”  he  said. 

Although  the  comparison 
between  one  of  the  world’s 
largest  multinational  compa¬ 
nies  and  the  U.S.  intelligence 
community  —  a  hodgepodge 
of  dozens  of  federal  agencies 
that  operate  more  or  less  inde¬ 
pendently  —  may  seem 
strange  to  some.  Tenet  wel¬ 
comed  the  idea. 

“It’s  a  good  model,”  said 


Tenet,  adding  that  having 
smaller  staffs  gives  executives 
more  power  over  execution. 
“[Having]  real  metrics  and 
power  to  move  people  and 
data  as  you  need  to  to  achieve 
better  execution  is  a  smart  way 
to  think  about  this  discipline 
for  the  future.” 

Hank  Zupnick,  CIO  of  GE 
subsidiary  GE  Capital  Real  Es¬ 
tate  in  Stamford,  Conn.,  said 
the  success  of  the  company’s 
culture  stems 
from  the  fact  that 
technologists  are 
employed  as 
strategic  business 
drivers. 

“As  a  CIO  at 
GE,  I’m  here  to  be 
a  business  manager,  to  help 
our  business  grow  and  profit, 
not  only  to  manage  technol¬ 
ogy,”  Zupnick  said.  He  also 
noted  that  all  IT  projects  are 
subject  to  Six  Sigma  quality 
standards  and  continual  re¬ 
views  by  senior  business  man¬ 
agers  to  ensure  that  IT  is  still 
relevant  to  the  changing  needs 
of  the  business. 

A  Strategic  Role  for  IT 

Rob  Enderle,  principal  analyst 
at  The  Enderle  Group  in  San 
Jose,  said  studies  of  GE’s  IT 
management  have  shown  that 


THE  DAY  IN  PHOTOS 

Dan  Verton's  photojournal  of 
the  testimony  of  Tenet  and 
Mueller  is  available  online: 

OQuickLkika4400 

www.computerworid.coin 


the  IT  group  plays  a  strategic 
role  in  the  company,  with  the 
CIO  reporting  directly  to 
the  CEO. 

“They  created  effective  syn¬ 
ergies  that  reduced  overall 
cost  and  allowed  one  group  to 
benefit  from  the  work  of  other 
groups,”  said  Enderle.  How¬ 
ever,  he  added  that  while  GE’s 
strategic  use  of  IT  was  the  re¬ 
sult  of  a  “huge  focus  on  quali¬ 
ty  and  integration,”  the  com¬ 
pany’s  business  model  wasn’t 
compared  with  those  of  com¬ 
panies  in  other  industries. 
Therefore,  the  9/11  commis¬ 
sion  may  want  to  look  at  addi¬ 
tional  companies  and  indus¬ 
tries  that  have  undertaken  ma¬ 
jor  reorganizations  to  fix  simi¬ 
lar  problems,  he  said. 

For  example,  “they  might 
want  to  look  at  pharmaceuti¬ 
cal  companies,  which  have  a 
reputation  for  being  better  at 
intelligence  gathering  and 
competitive  intelligence,”  En¬ 
derle  said.  Likewise,  General 
Motors  Corp.’s  massive  intelli¬ 
gence  problem  in  the  1970s 
might  offer  a  useful  example, 
he  said. 

Tenet  told  the  commission 
that  U.S.  intelligence  needs 
new  recruits  who  have  what 
former  GE  CEO  Jack  Welch 
credited  his  successor,  Jeffrey 
Immelt,  with  having:  a  cutting- 
edge  technological  back¬ 
ground  and  a  keen  strategic 
intellect.  It  needs  people  with 
“revolutionary  ideas  about 
technology”  and  how  it  works, 
said  Tenet. 

“The  people  you’re  recruit¬ 
ing  aren’t  30-year  veterans 
anymore,”  he  said.  “You’re  at¬ 
tracting  a  whole  new  labor 
force  that  doesn’t  remember 
the  Cold  War,  and  they  expect 
a  structure  that’s  going  to  be 
more  agile  and  mobile  and 
more  technologically  profi¬ 
cient.”  O  46250 


FBI,  DHS  Playing  IT  Catch-up 


WASHINGTON 

Despite  the  monumental 
efforts  that  have  been  made 
since  the  Sept.  11, 2001, 

terrorist  attacks  to  improve  data 
sharing  throughout  the  U.S.  intel¬ 
ligence  community,  major  prob¬ 
lems  still  exist  at  the  FBI  and 
the  Department  of  Homeland 
Security  (DHS),  according  to 
the  commission  investigating 
the  attacks. 

After  two  days  of  testimony 
that  ended  April  14,  the  National 
Commission  on  Terrorist  At¬ 
tacks  Upon  the  United  States 
issued  two  scathing  reports 
that  condemned  the  informa¬ 
tion-sharing  capabilities  of  key 
agencies  in  the  fight  against 
terrorism. 

“It  is  clear  that  gaps  in  intelli¬ 
gence  sharing  still  exist,”  the 
commission  stated  in  a  staff  re¬ 
port  titled  “Reforming  Law  En¬ 
forcement,  Counterterrorism, 
and  Intelligence  Collection  in 
the  United  States.”  The  report 
outlines  a  multitude  of  short¬ 
comings  that  still  existed  as  re¬ 
cently  as  last  fall. 

For  example,  FBI  agents 
complained  of  a  lack  of  comput¬ 
ers  with  access  to  Intelink,  the 
intelligence  community’s  cen¬ 
tralized,  top-secret  intranet.  And 
the  agent  in  charge  of  the 
Washington  field  office,  the 
second-largest  FBI  office  in  the 
nation,  said  a  lack  of  basic  con¬ 
nectivity  prevented  him  from 
sending  e-mails  across  town  to 
the  Department  of  Justice. 

“We  are  kidding  ourselves  if 
we  think  that  there  is  seamless 
integration  among  all  of  the 
agencies,”  the  report  quoted 


Michael  Rolince,  the  FBI's  acting 
assistant  director  for  intelli¬ 
gence,  as  stating. 

When  asked  by  commission 
member  Timothy  Roemer  if  he’s 
able  to  send  a  classified  e-mail 
with  an  attachment  to  his  coun¬ 
terparts  at  the  FBI,  Patrick 
Hughes,  assistant  secretary 
for  information  analysis  at  the 
DHS,  said  he  can  do  so,  but 
with  difficulty. 

The  problem  stems  from  “the 
technical  interface  between  the 
Department  of  Homeland  Securi¬ 
ty  and  the  FBI,”  said  Hughes. 

“But  we  have  FBI  liaison  officers 
present  in  the  DHS,  and  we 
would  pass  it  to  them  and  they 
would  transmit  it. .  .or  we 
would  use  secure  fax." 

In  an  unprecedented  public 
appearance,  James  Pavitt,  the 
official  in  charge  of  the  CIA’s 
clandestine  service,  said  the 
agency  is  able  to  directly  share 
electronic  data  “without  any 
question”  with  the  FBI  and  the 
Terrorist  Threat  Integration  Cen¬ 
ter,  the  central  clearinghouse  for 
all  terrorism  intelligence  analysis. 
However,  when  it  comes  to  shar¬ 
ing  with  the  DHS,  “I  do  not  have 
the  same  level  of  confidence  at 
this  time,”  he  said. 

TTIC  Director  John  Brennan 
said  he  has  direct  electronic 
connectivity  to  the  agencies  he 
works  with.  But  analysts  at  the 
TTIC  are  still  forced  to  conduct 
multiple  searches  for  informa¬ 
tion  that’s  stored  in  disparate 
databases  across  agencies, 
he  said. 

FBI  Director  Robert  Mueller 
called  the  commission’s  report 
“a  snapshot  in  time”  and  said 
improvements  have  been  made 
since  then  and  continue  to 
be  made. 

“Transitions  take  time,”  said 
Mueller.  “If  you  look  at  the  IBMs 
and  the  6Es . . .  they  will  tell  you 
there  are  a  number  of  compo¬ 
nents  to  transforming  an  orga¬ 
nization.  We  are  still  working  on 
the  information  technology  in 
our  communications,  but  we’re 
on  the  road  to  solving  those 
[problems]." 

-Dan  Verton 


www.computerworld.com 


NEWS 


COMPUTERWORLD  April  19. 2004 


5 


CA  Accounting  Scandal  Raises 
Questions  About  CEO’s  Fate 


Indictments  of  former  finance  executives 
prompt  suspicions  of  Kumar’s  complicity 


BY  STACY  COWLEY 

Following  a  wave  of  indict¬ 
ments  this  month  that  netted 
guilty  pleas  to  securities  fraud 
and  other  charges  from  sever¬ 
al  former  finance  executives  at 
Computer  Associates  Interna¬ 
tional  Inc.,  speculation  is  turn¬ 
ing  to  the  fate  of  the  compa¬ 
ny’s  CEO. 

CA  has  already  admitted  to 
improper  accounting  practices 
in  its  2000  fiscal  year  that 
were  under  investigation  by 
the  Securities  and  Exchange 
Commission  and  U.S.  Depart¬ 
ment  of  Justice  [QuickLink 
44563].  The  company  has 
since  revamped  its  accounting 
methods,  replaced  most  of  its 
board  and  pushed  out  a  num¬ 
ber  of  executives  tainted  by 
fraud.  But  one  executive  from 
that  era,  Sanjay  Kumar,  now 
serves  as  the  company’s  CEO. 
And  questions  linger  about 
the  then-president  and  chief 
operating  officer’s  involve¬ 
ment  in  CA’s  accounting 
manipulations. 

Potential  Targets 

The  DOJ  complaint  against 
Ira  Zar,  CA’s  chief  financial 
officer  until  last  October, 
charges  that  he  regularly  met 
with  two  other  unnamed 
“high-level”  executives  who 
allegedly  knew  and  approved 
of  the  financial  sleight  of 
hand.  Zar  at  the  time  reported 
directly  to  Kumar,  who  in  turn 
answered  to  then-Chairman 
and  CEO  Charles  Wang,  a 
company  co-founder  who  has 
since  retired. 

The  DOJ  is  continuing  its 
investigation  in  conjunction 
with  the  SEC,  and  speculation 
in  the  IT  and  financial  sectors 
persists  that  Wang  and  Kumar 
may  be  targets  of  future 
actions. 

Some  financial  analysts  are 
already  calling  for  Kumar’s 
resignation,  arguing  that  as 
the  company’s  operational 


head,  he  either  knew  or 
should  have  known  what  was 
going  on.  Mike  Trigg,  an  ana¬ 
lyst  at  Morningstar  Inc.  in 
Chicago,  issued  a  report  blast¬ 
ing  CA  for  “a  management 
team  that  we  don’t  trust,”  and 
New  York-based  Credit  Suisse 
First  Boston  LLC  wrote  of  “in¬ 
creasing  fear”  that  Kumar  is 
one  of  the  DOJ’s  implicated 
but  unnamed  executives. 
Credit  Suisse  called  Kumar’s 
forced  departure  “a  scenario 
that  is  being  widely  reported 
by  Wall  Street.” 

CA  on  April  8  released  a 
statement  acknowledging  that 
the  company  and  its  officers 


could  face  civil  and  criminal 
proceedings  [QuickLink 
a4430],  but  it  declined  further 
comment. 

Complicating  the  issue  of 
Kumar’s  future  is  the  general 
consensus  among  IT  industry 
observers  that  he  has  done  a 
good  job  as  CA’s  leader.  When 
Kumar  ascended  in  August 
2000,  he  inherited  a 
company  that  in¬ 
vestors  didn’t  trust 
and  that  customers 
castigated  for  hard¬ 
ball  sales  tactics.  In 
response,  Kumar 
overhauled  CA’s  ac¬ 
counting  and  corpo¬ 
rate  governance,  re¬ 
formed  its  sales  and 
customer  service  or¬ 
ganizations  and 


Some  financial  an¬ 
alysts  have  called 

on  SANJAY  KUMAR 

to  resign. 


made  customer  satisfaction  a 
top  priority. 

The  changes  have  worked, 
according  to  Jeffrey  St.  Ger¬ 
main,  a  project  manager  for 
the  Massachusetts  Depart¬ 
ment  of  Education’s  Virtual 
Education  Space  project, 
which  runs  on  CA’s  portal 
software.  “At  least  on  our  side, 
things  have  gotten  better,”  he 
said.  “Perhaps  because  of 
what’s  been  going  on,  they’ve 
been  more  attentive  to  us.” 

Javed  Matin,  CEO  of  Myriad 
Solutions  Inc.  in  Silver  Spring, 
Md.,  said  his  consul¬ 
tancy,  which  is 
based  around  CA 
products,  hasn’t  lost 
any  deals  because  of 
the  accounting  scan¬ 
dal.  “I  don’t  think  it’s 
affected  us  or  our 
clients  in  any  way, 
shape  or  form,”  he 
said.  “It’s  been  going 
on  for  so  long,  and 
Computer  Associ- 


New  Oracle  Tool  Aims  to 
Ease  Java  Development 

JDeveloper  lOg  adds 
visual  capabilities 


BY  CAROL  SLIWA 

The  developers  who  write  or¬ 
der  management  applications 
for  Associated  Wholesalers 
Inc.  decided  last  September  to 
test  a  beta  version  of  Oracle 
Corp.’s  JDeveloper  lOg. 

By  November,  they  were  en¬ 
grossed  in  heavy-duty  devel¬ 
opment  of  service-oriented  ap¬ 
plications  to  replace  the  main¬ 
frame-based  systems  they  had 
been  using  for  over  20  years, 
according  to  Les  Morton, 
product  manager  of  the  order 
management  applications. 

“Bear  in  mind,  none  of  us 
had  any  Java  programming  ex¬ 
perience,”  Morton  said.  “We 
also  had  no  idea  what  J2EE  is.” 

That’s  exactly  the  sort  of  re¬ 
action  that  Java  tools  vendors 
such  as  Oracle  have  been  hop¬ 
ing  to  get  from  developers 
new  to  Java.  They  have  been 
working  to  make  their  tools 
easier  to  use  in  hopes  that 


non-Java  programmers  will  be 
attracted  to  their  development 
environments  over  Microsoft 
Corp.’s  rival  .Net  approach. 

Productivity  and  ease  of  use 
are  typically  associated  with 
Microsoft’s  tools,  while  Java 
and  especially  J2EE  develop¬ 
ment  are  often  viewed  as  more 
complex. 

But  Oracle’s  JDeveloper  lOg, 
released  last  week,  is  one  of  a 
collection  of  new  tools  that 
vendors  hope  will  start  to  re¬ 
verse  that  image.  Rob  Cheng, 
product  marketing  director  of 
Oracle’s  application  server 
and  tools,  cited  the  drag-and- 
drop  capabilities  in  JDevelop¬ 
er  lOg’s  visual  Struts  page-flow 
modeler  and  a  visual  Web¬ 
page  editor  as  important  steps 
in  the  right  direction. 

Cheng  also  noted  that  JDe¬ 
veloper  lOg’s  support  for  the 
Unified  Modeling  Language 
is  intended  to  help  developers 
think  through  complex  de¬ 
signs  before  they  start  produc¬ 
ing  code. 

The  new  tool’s  Application 


Development  Framework 
takes  the  models  from  the  tool 
and  “implements  all  the  hard 
stuff  underneath  that  the  non- 
Java  experts  wouldn’t  want  to 
code  themselves,”  Cheng 
added.  He  said  ADF  has  pre¬ 
built  runtime  libraries  that  will 
reduce  the  amount  of  code 
that  developers  need  to  write. 

ADF  will  run  on  any  J2EE 
application  server  and  has 
been  certified  to  run  on  BEA 
Systems  Inc.’s  WebLogic  and 
the  open-source  JBoss,  ac¬ 
cording  to  Cheng. 

“No  other  tools  vendor 
with  a  productivity  framework 
can  claim  that  their  frame¬ 
work  will  run  on  any  J2EE 
application  server,”  Cheng 
said.  “They’re  all  tied  to  their 
application  servers.” 

The  real  sell¬ 
ing  point  was 
that  it  allowed  us  to 
maintain  the  archi¬ 
tectural  principles 
of  our  projects. 

LES  MORTON.  PRODUCT  MANAGER, 
ASSOCIATED  WHOLESALERS  INC. 


ates  isn’t  the  only  company 
that’s  had  this  sort  of  problem.” 

If  Kumar  is  indicted,  some 
disruption  is  possible.  “That 
would  get  a  lot  of  visibility. 
People  would  take  notice,” 
Matin  said.  “We’ll  have  to  wait 
and  see.  I’m  hoping  it  would¬ 
n’t  have  any  adverse  effects  on 
our  business  or  CA’s  business.” 

Michael  Dortch,  an  analyst 
at  the  Robert  Frances  Group 
Inc.  in  Westport,  Conn.,  said 
CA  will  weather  any  shake-up. 
“I’m  not  worried  about  them, 
and  none  of  our  customers 
seem  to  be  very  worried,  ei¬ 
ther,”  he  said.  “What  most  IT 
executives  care  about  are  the 
next  deliverables.  If  something 
were  to  happen  to  impede 
Sanjay’s  ability  to  lead,  they’d 
find  the  engine  would  keep 
going.  CA  is  bigger  than  any 
one  individual  in  the  manage¬ 
ment  team.”  O  46246 


Cowley  writes  for  the  IDG 
News  Service. 


Although  Oracle  aims  to  at¬ 
tract  general  developers  with 
the  tool,  analysts  said  they  ex¬ 
pect  it  to  hold  the  greatest  ap¬ 
peal  for  users  of  Oracle’s  appli¬ 
cation  server  and  database. 

Indeed,  one  reason  Associ¬ 
ated  Wholesalers  decided  to 
go  with  the  tool  was  that  it  al¬ 
ready  used  Oracle’s  database 
server  and  Internet  develop¬ 
ment  suite,  Morton  said. 

But  Morton  also  stressed 
the  attractiveness  of  the  data- 
binding  capabilities  in  ADF 
and  ease  of  development  with 
JDeveloper.  “The  real  selling 
point  was  that  it  allowed  us  to 
maintain  the  architectural 
principles  of  our  projects,”  he 
said.  “We  wanted  to  have  a 
service-oriented  architecture 
for  our  system.  The  data-bind- 
ing  framework  allowed  that.” 

Mark  Driver,  an  analyst  at 
Gartner  Inc.,  said  the  code¬ 
centric  JDeveloper  lOg  eases 
development  for  medium-  to 
large-scale  projects,  but  Ora¬ 
cle  still  has  no  offering  in  the 
“J2EZ”  class,  such  as  BEA’s 
WebLogic  Workship  and  Sun 
Microsystems  Inc.’s  upcoming 
Java  Studio  Creator,  to  target 
the  traditional  Microsoft  audi¬ 
ence.  O  46255 
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Sun  Overhauls 
Hardware  Units 

Sun  Microsystems  Inc.  reported 
a  $760  million  loss  for  its  third 
quarter  and  announced  more 
management  changes  and  a 
reorganization  of  its  hardware 
units.  Microprocessors  and  both 
high-  and  low-end  Sparc  servers 
are  being  combined  in  a  new 
Throughput  Systems  unit  under 
David  Yen,  an  executive  vice 
president  at  Sun.  Systems  based 
on  processors  from  Intel  Corp. 
and  Advanced  Micro  Devices  Inc. 
will  be  folded  into  Sun’s  Network 
Systems  division. 

John  Fowler  was  named  act¬ 
ing  executive  vice  president  of 
Network  Systems  and  lead  tech¬ 
nology  officer  for  Sun  as  a 
whole.  Both  he  and  Yen  report 
to  Jonathan  Schwartz,  who  be¬ 
came  president  and  chief  operat¬ 
ing  officer  earlier  this  month. 

Sun  also  said  Mark  Tolliver,  its 
chief  marketing  and  strategy 
officer,  and  Neil  Knox,  who  had 
been  in  charge  of  volume  sys¬ 
tems,  are  leaving  the  company. 
(Read  an  interview  with  Yen 
about  Sun’s  processor  develop¬ 
ment  plans,  on  page  12.) 


HP  Offers  4-CPU 
Opteron  Server 

Hewlett-Packard  Co.  today 
will  formally  announce  its  first 
servers  based  on  AMD’s  Opteron 
processor,  including  a  four-CPU 
model.  HP  said  the  ProLiant 
DL585  supports  twice  the  mem¬ 
ory  capacity  and  is  less  expen¬ 
sive  than  its  DL580  system, 
which  is  based  on  Intel’s  Xeon 
chip.  But  the  DL585  lacks  the 
memory  protection  features  built 
into  the  DL580,  HP  added. 


PeopleSoft  Adds  to 
Rapid  Rollout  Tools 

PeopleSoft  Inc.  today  plans  to 
expand  a  rapid  deployment  offer¬ 
ing  for  its  EnterpriseOne  mid- 
market  ERP  applications,  adding 
support  for  Intel-based  servers 
and  its  fixed-time,  fixed-cost  in¬ 
stallation  framework. 
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CFO  Can  Automate 
CIO  Watchdog  Tool .. . 


...  in  the  first  quarter  of  2005,  when  Centrata  Inc.  in  Red¬ 
wood  City,  Calif.,  plans  to  ship  Version  4  of  its  Service  Cata¬ 
log,  which  will  add  analytics  specifically  for  chief  fi¬ 
nancial  officers  to  sniff  around  IT  project  metrics  to 
ensure  that  CIOs  are  properly  serving  business  units 
and  the  overall  company.  That  might  seem  down¬ 


right  harsh  to  you  CIOs 
who  are  the  primary  users 
of  today’s  3.0  version  of  the 
software.  After  all,  you’ve 
shelled  out  somewhere  be¬ 
tween  $2  million  and  $3.5  mil¬ 
lion  for  the  Centrata  Service 
Catalog  to  standardize  and 
automate  the  delivery  of  IT 
services  to  business  units  and 
manage  projects  from  cradle 
to  grave.  If  a  company  divi¬ 
sion  needs  a  new  mail  server, 
a  business  unit  manager 
opens  Service  Catalog,  de¬ 
cides  what  he  wants,  then  out 
spits  a  detailed  “statement  of 
work,”  which  Centrata  CEO 
Venkat  Raju  claims  is  more 
detailed  than  your  everyday 
request  for  proposal.  Not  only 
does  the  statement  include 
the  basic  RFP  specifics  on 
hardware,  software  and  labor 
costs,  but  it  also  covers  com¬ 
mitments  on  deployment 
schedules,  long-term  support 
and  even  end-of-life  projec¬ 
tions  and  costs.  The  whole 
shebang.  Next  year,  your  CFO 
will  get  a  raft  of  metrics  based 
on  Service  Catalog  to  see  if 


you’re  as  efficient  as  you 
claim.  Of  course,  you  could 
always  skip  the  upgrade. 

Beta  work  leads  to 
alpha  advantage . . . 

...  for  Lowe 
Enterprises 
Inc.,  a  Los  An¬ 
geles-based 
national  real 
estate  devel¬ 
oper.  Keith 
Fletcher,  se¬ 
nior  vice  pres¬ 
ident  for  in¬ 
formation  sys¬ 
tems,  says  he 
got  “an  early, 
early  beta”  of 
Microsoft  Of¬ 
fice  System  and  put  it  into 
production.  Daring?  Crazy? 
Would  you  do  that  with  a  Mi¬ 
crosoft  product?  Maybe  you 
should.  Fletcher  says  that 
by  the  time  Microsoft 
finally  released  the 
product  last  year,  he 
was  already  saving 
around  $100,000  just  by  re¬ 
ducing  the  number  of  Ex¬ 


change  servers  needed.  More 
important,  he  was  able  to  roll 
out  a  custom  application 
quickly  to  his  real  estate  ac¬ 
quisition  team.  Each  land 
deal,  he  says,  runs  in  the 
range  of  $20  million  to 
$30  million.  With  the  cus¬ 
tomization  his  staff  did  with 
Office  System,  Fletcher  says 
the  company  can  probably 
handle  two  or  three  more 
deals  a  year  because  of  better 
information  management  and 
access.  By  this  summer,  he 
says,  another  customized  ap¬ 
plication  will  be  ready  for  all 
of  Lowe’s  real  estate  man¬ 
agers.  There  are  downsides  to 
depending  on  a  product  still 
in  beta,  though.  “We  had  no 
final  documentation  until 
after  Microsoft  shipped”  the 
final  release,  he  says.  A  more 
subtle  problem,  Fletcher 
points  out,  is  that  end  users 
haven’t  heard  about  the  new 
product  in  the  media  or  by 
word  of  mouth,  so  it  lacks 
validation  in  their  minds. 

“You  have  to  sell  it  harder  in¬ 
ternally,”  he  advises.  The  up¬ 
side?  “We’re  way  ahead  of  the 
competition,”  Fletcher  claims. 

Once  is  more 
than  enough . . . 

. . .  when  you  need  to  sign 
onto  your  company  network 
and  all  your  applications,  if 
you  use  the  OneSign  appli¬ 
ance  from  Imprivata  Inc.  in 
Lexington,  Mass.  The  rack¬ 
mounted  device  uses  the  pro¬ 
prietary  Application  Profile 
Generator  (APG),  which 
learns  each  and  every  pack¬ 
aged,  custom  or  Web  app’s 
access  process  and  combines 
that  information  with  your 
user-rights  profiles  in  Active 
Directory  or  other  LDAP  di¬ 
rectories  to  identify  and  au¬ 


thenticate  users.  You  simply 
load  a  lightweight  client  on 
users’  PCs  and  let  them  log 
into  their  applications  once, 
and  the  APG  takes  over  for 
every  subsequent  log-on  proc¬ 
ess.  Version  2  of  the  software 
adds  shared  workstation  fea¬ 
tures  for  multiple  users  and 
will  be  available  next  week. 
Pricing  starts  at  $20,000. 

Get  out  of  your  car  and 
onto  your  keyboard . . . 

. . .  and  maybe  conduct  a  little 
official  business  online  by 
joining  Raindance  Communi¬ 
cations  Inc.’s  Earth  Day  effort 
this  week  to  cut  back  on  the 
250  million  hours  per  month 


35  million 
gallons  of  gas 


that  white-collar  workers 
waste  driving  to  and  from 
local  meetings.  And  you  can 
join  for  free  on  April  22,  Earth 
Day,  by  being  among  the  first 
1,000  companies  to  sign  up 
for  the  Louisville,  Colo.- 
based  vendor’s  Raindance 
Meeting  Edition  for  Web,  au¬ 
dio  and  multipoint  videocon¬ 
ferencing.  Chief  Marketing 
Officer  Brian  Burch  says  ser¬ 
vices  like  Raindance’s  are 
widely  used  to  cut  down  on 
interstate  travel  and  hotel 
costs.  However,  what  he  calls 
“the  hidden  commute”  of  lo¬ 
cal  white-collar  business  trips 
is  not  only  expensive  and 
time-wasting,  but  it’s  bad  for 
the  air,  too.  According  to  the 
Environmental  Protection 
Agency,  its  Best  Workplaces 
for  Commuters  program  an¬ 
nually  saves  35  mil¬ 
lion  gallons  of  gas 
and  cuts  2,000  tons 
of  nitrous  oxide  and 
500,000  tons  of  car¬ 
bon  dioxide  from  the 
skies.  So,  get  online  and 
off  the  road.  O  46230 


saved  around 
SlOOk  with  the 
“early,  early 
beta”  he 
received  of 
Microsoft 
Office  System. 


Sue  Simonett 
Senior  Director  of  IS 

General  Mills,  Inc. 

Minneapolis,  Minnesota 

Sue  Simonett  has  always  worked  in  Information 
Systems  (IS),  a  career  she  loves  both  for  the 
strategic  view  it  has  afforded  as  well  as  the  abil¬ 
ity  to  positively  impact  the  lives  of  end  users. 

Recently  charged  with  reinventing  the  way  that 
a  sales  force  of  450  retail  reps  managed  their 
numerous  product  lines,  she's  implemented  an 
ingenious  handheld  system  that  brings  technol¬ 
ogy  to  the  front  lines  of  the  company. 

Using  a  stylus  and  a  handheld  mobile  device, 
sales  reps  now  electronically  record  product 
information  while  in  the  store.  Gone  are  the 
days  of  messy  paper  logs  and  evenings  spent 
keying  the  day's  data  into  a  laptop  for  down¬ 
loading  to  corporate.  At  the  end  of  each  day, 
the  rep  simply  places  the  device  in  a  cradle  and 
the  data  is  sent  directly  from  the  handheld.  The 
results:  sales  reps  that  can  handle  more  prod¬ 
ucts  with  fewer  errors,  and  get  the  right  prod¬ 
ucts  to  the  right  shelves  faster. 

Great  Moment  at  Work:  "My  first  warehouse 
management  system,  start-up  day.  We  designed 
a  top  notch  system  that  totally  reengineered 
the  business  and  it  was  really  gratifying  when 
everything  fell  right  into  place." 

Microsoft  Office  System  salutes  those  who 
have  done  great  work  in  the  IT  field. 


Great  Moments  at  Work. 

Success  Stories  of  an  IT  Hero 
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"Our  goal  in  information  systems  is  to  leave 
behind  an  organization  that's  more  efficient 
than  when  we  arrived."  —  Sue  simonett 
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Microsoft  Says  It’s  Considering 
‘Marginal’  Changes  to  Longhorn 


Major  new  features  to  remain  intact; 
operating  system  beta  due  next  year 


BY  CAROL  SLIWA 

Microsoft  corp. 

confirmed  last 
week  that  it’s 
evaluating  fea¬ 
tures  and  functional  scenarios 
that  might  be  scaled  back  in 
the  next  major  Windows  re¬ 
lease,  code-named  Longhorn. 

But  Greg  Sullivan,  a  lead 
product  manager  in  Micro¬ 
soft’s  Windows  client  group, 
said  the  company  is  looking  at 
“fairly  marginal  features”  and 
has  no  plans  to  make  signifi¬ 
cant  changes  to  the  Longhorn 
vision  that  it  laid  out  last  Oc¬ 
tober  at  its  Professional  Devel¬ 
opers  Conference  (PDC). 

“The  normal  part  of  any  de¬ 
velopment  process  is  looking 
at  the  project  end  to  end  and 
prioritizing  features  and  sce¬ 


narios  and  capabilities,”  Sulli¬ 
van  said.  “That’s  the  process 
we’re  in  with  Longhorn  now.” 

Microsoft  distributed  a  de¬ 
veloper  preview  edition  of 
Longhorn  at  the  PDC,  and  the 
company  plans  to  refresh  the 
developer  preview  for  those  at¬ 
tending  next  month’s  Windows 
Hardware  Engineering  Confer¬ 
ence  in  Seattle,  according  to 
Sullivan.  He  said  Microsoft  will 
also  provide  updated  guidance 
at  WinHEC,  although  the  Long¬ 
horn  review  process  will  con¬ 
tinue  after  the  event,  since  the 


Correction 

In  the  chart  on  page  28  of  last 
week’s  issue,  some  figures  for 
maximum  memory  supported 
were  incorrect.  For  the  AMD 
Opteron  and  the  Athlon  64  FX, 
and  for  the  Intel  Itanium,  the 
correct  figure  is  16GB  per  CPU 
(using  current  4GB  DIMM  tech¬ 
nology),  with  a  theoretical  limit 
of  1.024GB  per  CPU.  In  addition, 
Sun  UltraSparc  CPUs  can  indeed 
run  32-bit  applications. 


First  beta  isn’t  due  for  months. 

At  the  PDC,  Microsoft  said 
the  first  beta  of  Longhorn  was 
expected  in  the  second  half  of 
this  year.  The  date  for  the  beta 
release  is  now  pegged  for  the 
first  half  of  next  year,  Sullivan 
confirmed.  “The  final  release 
really  will  be  determined  by 
the  customer  feedback  we  get 
and  when  the  product  meets 
the  quality  standards  our  cus¬ 
tomers  require,”  he  added. 

During  last  month’s  Gartner 
Symposium  in  San  Diego,  Bill 
Gates,  Microsoft’s  chairman 
and  chief  software  architect, 
said  Longhorn  is  “not  a  date- 
driven  release.”  But  he  also  ac¬ 
knowledged  that  a  2006  re¬ 
lease  date  is  “probably  valid 
speculation.”  The  company 


LONGHORN  FEATURES 


New  presentation  system 


Communications  infrastruc¬ 
ture  and  programming  model 
for  building  advanced  service- 
oriented  applications 


WinFS 


Storage  subsystem;  com¬ 
bines  file  data,  relational  data 
and  XML  data 


earlier  last  year  had  said  the 
product  would  ship  in  2005. 

A  Microsoft  spokesman 
confirmed  last  week  that  the 
“internal  target  date”  for  the 
Longhorn  client  operating  sys¬ 
tem  is  the  first  half  of  2006, 
but  he  quickly  added  that  the 
ship  date  isn’t  nailed  down. 

Longhorn  has  three  major 
components.  Avalon  is  the 


code  name  for  a  new  presenta¬ 
tion  system  featuring  a  unified 
hardware-accelerated  graphics 
programming  model  for  video, 
animation  and  2-D  and  3-D 
graphics.  Indigo  is  the  com¬ 
munications  infrastructure 
and  programming  model  for 
building  advanced  service-ori¬ 
ented  applications.  WinFS  is 
the  new  storage  subsystem. 

Sullivan  said  that  under 
the  current  system,  files  are 
stored  in  folders  that  are  sub¬ 
directories  in  the  hierarchical 
file  system.  With  WinFS,  ob¬ 
jects  and  the  relationships  be¬ 
tween  them  will  be  stored,  and 
each  object  in  the  store  will 
have  XML-based  metadata  as¬ 
sociated  with  it  so  users  can 
search,  find  and  act  on  the  in¬ 
formation  in  a  more  flexible 
and  powerful  way,  he  said. 

Sullivan  said  it’s  possible 
that  elements  of  the  three  ma¬ 


jor  Longhorn  subsystems 
might  be  scaled  back,  but 
he  characterized  potential 
changes  as  “little  things.”  He 
said  the  product  scoping  proc¬ 
ess  involves  “low-priority 
marginal  features  that  may  not 
make  the  cut.” 


BusinessWeek  Online  recent¬ 
ly  claimed  that  Microsoft 
plans  to  cut  some  of  the  most 
far-reaching  pieces  of  Long¬ 
horn  and  reported  that  the 
current  plan  calls  for  the  new 
file  system  to  work  on  PCs  but 
not  extend  to  files  shared  over 
a  corporate  network.  Business- 
Week  said  it  based  the  infor¬ 
mation  on  two  Microsoft 
e-mail  messages  it  obtained. 

“There’s  a  degree  of  speci¬ 
ficity  there  that  I  didn’t  arrive 
at  reading  the  same  internal 
communication,”  Sullivan  said. 
He  added  that  it’s  too  soon  to 
say  what  the  enabled  scenar¬ 
ios  will  or  will  not  be.  “WinFS 
was  never  designed  as  a  way 
to  index  the  Internet,”  he  said. 
“We’re  looking  at  various  ways 
that  corporate  data  across  cor¬ 
porate  intranets  can  be  ex¬ 
posed  to  enable  users  to  inter¬ 
act  with  that  data.”  ©  46244 


Hackers  Breach  Research  Systems,  But  Data  Kept  Safe 


BY  PAUL  ROBERTS 
AND  TODD  R.  WEISS 


In  recent  weeks,  malicious 
hackers  have  infiltrated  sys¬ 
tems  at  various  U.S.  universi¬ 
ties  that  operate  scientific  re¬ 
search  or  high-performance 
computing  centers.  But  sever¬ 
al  schools  said  none  of  their 
data  was  compromised. 

Stanford  University,  the 
University  of  California,  San 
Diego,  and  the  University  of 
Illinois  at  Urbana-Champaign 
confirmed  last  week  that  sys¬ 
tems  on  their  campuses  had 
been  broken  into.  The  attacks 
forced  the  schools  to  change 
user  passwords  and  take  some 
computers  off-line  to  patch  se¬ 
curity  holes  that  were  used  to 
gain  access  to  the  systems. 

Sangtae  Kim,  director  of  the 
Division  of  Shared  Cyberinfra¬ 
structure  at  the  National  Sci¬ 
ence  Foundation  in  Washing¬ 
ton,  said  the  federal  agency 
believes  the  attacks  in  the  U.S. 
were  part  of  a  much  larger  ac¬ 


tion  that  affected  high-perfor¬ 
mance  systems  worldwide. 

Some  of  the  U.S.  facilities 
that  were  affected  are  part  of 
an  NSF-funded  network  called 
TeraGrid,  which  links  high- 
end  systems  at  different  sites. 
The  intruders  were  able  to  ac¬ 
cess  TeraGrid  hardware  in  at 
least  one  location,  according 
to  an  NSF  spokesman. 

The  San  Diego  Supercom¬ 
puter  Center,  a  TeraGrid 
member  at  the  University  of 
California  campus  in  that  city, 
said  in  a  statement  posted  on 
its  Web  site  April  9  that  an  in¬ 
truder  had  gained  access  to  “a 
number”  of  its  systems  over  a 
four-day  period. 

But  the  intruder  was  quickly 
detected  and  monitored,  the 
center  added.  It  noted  that  it 
uses  a  “defense  in  depth”  ap¬ 
proach  that  hides  critical  data 
under  multiple  security  layers. 


As  a  result,  the  intrusions 
were  just  an  “inconvenience,” 
a  spokeswoman  said. 


Stanford’s  IT  Systems  and 
Services  group  also  posted  a 
security  alert,  warning  end 
users  at  the  school  about  intru¬ 
sions  into  multiuser  systems 
running  Solaris  and  Linux. 

The  university’s  IT  staff  be¬ 
came  aware  of  the  intrusions 
after  users  noticed  discrepan¬ 
cies  in  the  times  of  their  last 


Tips  for  protecting 
systems  against 
network  intrusions 


■  Install  all  security-related 
operating  system  patches. 


<  ...... 
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m  Make  sure  end  users  choose 
passwords  that  are  hard  to  crack. 


to  —  —  —  - 


Use  different  passwords  on  all 
root-level  accounts. 


(A  -  —  —  — 
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Use  Secure  Shell  software 
I  with  RSA  keys  or  Kerberos  tech- 
°  nology  to  authenticate  users. 


■  Limit  remote  access  to  un¬ 
patched  multiuser  systems  via 
firewalls  or  other  approaches. 


reported  log-ins.  The  alert 
said  other  systems  began  per¬ 
forming  poorly  or  erratically 
after  the  intruders  installed 
so-called  rootkits,  which  are 
programs  that  allow  hackers 
to  disguise  their  presence  and 
gather  information  such  as 
user  names  and  passwords. 

The  attackers  gained  access 
to  systems  by  sniffing  pass¬ 
words  from  unsecure  network 
traffic,  such  as  Telnet  remote 
communications  sessions,  or 
by  reading  password  files  on 
infiltrated  systems,  according 
to  the  alert.  Then  they  looked 
for  other  systems  that  lacked 
up-to-date  security  patches. 

A  Stanford  spokesman  said 
the  attackers  infiltrated  about 
30  computers  but  caused  no 
damage  or  loss  of  data.  “They 
got  in,  they  were  annoying, 
but  [the  systems]  were  not 
affected,”  he  said.  ©  46256 


Roberts  is  a  reporter  at  the  IDG 
News  Service. 


INNOVATIVE  TECHNOLOGY  2004  AWARDS 


Using  a  Hot  Technology  with  Real  Business  Value?  Nominate  your 
vendor  for  Computerworld’s  Innovative  Technology  2004  Awards 


COMPUTERWORLD 

INNOVATIVE 

TECHNOLOGY 


2004  AWARDS 


For  these 
special  awards, 
we’re  asking 
IT  customers  - 


Computerworld’s 

readers  —  to 
nominate  the 
vendors  they  believe  offer  leading-edge 
technology  products  or  services  that 
provide  business  value  to  customers. 


Eligible  Nominees 

Computerworld’s  Innovative  Technology  awards 
are  “customer  choice,”  which  means  Computerworld  is 
asking  those  companies  that  use  technology  (but  don’t 
produce  or  sell  it)  to  nominate  vendors.  The  awards  are 
devoted  to  identifying  truly  breakthrough  technology  - 
from  vendors  with  long  histories  or  those  new  to  the  indus¬ 
try  -  and  showcasing  how  leading  organizations  are  using 
this  technology  to  achieve  business  payback. 


Evaluation  &  Results 

From  May  17  to  June  14, 2004,  Computerworld  will  survey 
those  vendor  nominees  about  their  technology  applica¬ 
tions.  A  panel  of  outside  experts  and  Computerworld  edi¬ 
tors  will  then  review  the  surveys  and  choose  the  winners. 
Survey  results  and  stories  that  offer  practical  advice  from 
IT  leaders  using  these  technologies  will  be  published  in  the 
September  13, 2004  issue  of  Computerworld, 
online  at  Computerworld.com. 


Nominate  online  at  www.computerworld.com/research/innovativetech 

from  now  through  May  10, 2004.  Questions?  Contact  innovativetech@computerworld.com 
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Oracle  Review  Put 
On  Hold  in  Europe 


The  European  Commission  said 
its  antitrust  review  of  Oracle 
Corp.’s  hostile  bid  to  buy  People- 
Soft  Inc.  has  been  put  on  hold 
while  officials  seek  more  informa¬ 
tion  from  Oracle.  The  commission 
dropped  a  May  11  deadline  for 
deciding  whether  it  will  seek  to 
block  a  takeover  of  PeopleSoft;  it 
was  the  second  time  it  has  post¬ 
poned  the  ruling  this  year.  Oracle 
said  it  will  respond  to  the  request 
for  more  information  “as  quickly 
as  possible.” 


IBM  Says  Profits, 
Sales  Rose  in  Q1 

IBM  reported  a  $1.6  billion  profit 
on  revenue  of  $22.2  billion  for 
the  first  quarter,  with  its  IT  ser¬ 
vices  unit  accounting  for  half  of 
total  sales.  Net  income  was  up 
16%  year  over  year,  and  revenue 
rose  11%.  John  Joyce,  IBM’s 
chief  financial  officer,  said  during 
a  conference  call  that  mainframe 
sales  rebounded  after  the  compa¬ 
ny  reinstated  more  aggressive 
pricing  on  those  systems. 


Microsoft  Settles 
InterTrust  Lawsuit 

Ten  days  after  resolving  its  long- 
running  legal  fight  with  Sun 
Microsystems  Inc.  [QuickLink 
45957],  Microsoft  Corp.  said  it 
agreed  to  settle  a  patent  infringe¬ 
ment  lawsuit  filed  three  years  ago 
by  InterTrust  Technologies  Corp. 
As  part  of  the  deal,  Microsoft  will 
pay  $440  million  to  license  Santa 
Clara,  Calif.-based  InterTrust’s 
portfolio  of  patents  on  digital 
rights  management  technology. 


Short  Takes 

IBM  said  it  plans  to  buy  Schlum- 
berger  Ltd.’s  London-based  busi¬ 
ness  continuity  services  unit  for 
an  undisclosed  price. . . .  EMC 
CORP.  reported  a  first-quarter 
profit  of  $139.8  million,  up  from 
$35.2  million  a  year  earlier.  Total 
revenue  was  $1.87  billion.  The 
storage  vendor  also  raised  its 
second-quarter  forecast. 


MySQL  Plans  Clustering  Tool 


Add-on  will  let  users  distribute  vendor’s 
open-source  DB  across  multiple  servers 


BY  MARC  L.  SONGINI 

Looking  to  boost  the 
reliability  and  avail¬ 
ability  of  its  open- 
source  database, 
MySQL  AB  last  week  said  it 
plans  to  add  clustering  support 
to  the  software  later  this  year. 

At  its  user  conference  in  Or¬ 
lando  last  week,  MySQL  pre¬ 
viewed  the  MySQL  Cluster 
feature,  promoting  it  as  a  low- 
cost  way  to  boost  database  up¬ 
time  while  ensuring  that  users 
can  fail  over  to  backup  servers 
if  a  system  crashes.  The  Upp¬ 
sala,  Sweden-based  company 
said  MySQL  Cluster  will  sup¬ 
port  “five  9s”  database  avail¬ 
ability  through  the  use  of  a 
parallel  server  architecture. 

Zack  Urlocker,  MySQL’s 
vice  president  of  marketing, 
emphasized  that  the  open- 
source  vendor  isn’t  position¬ 
ing  itself  to  compete  directly 
with  enterprise-class  databas¬ 
es  from  vendors  such  as  Ora¬ 
cle  Corp.  and  IBM. 

“Those  are  very  mature 
products  that  have  all  the  fea¬ 
tures  you  can  ever  imagine,” 
he  said.  “Think  of  those  as  the 
Ferraris,  while  we’re  providing 
the  Honda  database  for  core 
functions  with  extreme  relia¬ 
bility  at  a  low  cost.” 

MySQL  Cluster  is  due  in  the 
third  quarter  as  an  add-on  to 
the  company’s  namesake  data¬ 
base.  The  clustering  tool  will 
let  users  distribute  MySQL 
databases  over  multiple  ma¬ 
chines  and  manage  them  as  if 
they  were  on  a  single  system. 
Any  changes  to  one  server  in 
the  cluster  will  be  automati¬ 
cally  synchronized  to  the  oth¬ 
er  machines  through  data 
replication,  MySQL  said. 

The  clustering  feature 
would  probably  be  most  use¬ 
ful  for  companies  running 
heavy-duty  Web  applications, 
said  Carl  Rubin,  principal  at 
Evidata  Solutions,  a  Newton, 
Mass.-based  database  consul¬ 
tancy  that  uses  MySQL  to 
store  customer  information. 


For  Evidata  itself,  Rubin  is 
more  interested  in  other  en¬ 
hancements  that  are  coming  in 
Version  5.0  of  MySQL,  which 
was  announced  in  January  and 
is  scheduled  to  ship  in  the  sec¬ 
ond  half  of  the  year.  He  cited 
promised  enhancements  such 
as  support  for  stored  proce¬ 
dures  and  the  ability  to  auto¬ 
matically  join  database  tables. 

At  least  initially,  most 
MySQL  users  probably  won’t 
need  advanced  capabilities 
like  clustering,  said  Charles 
Garry,  an  analyst  at  Meta 


TECHNOLOGY  DETAILS 


MySQL  Cluster 

THROUGHPUT:  100,000  replicat¬ 
ed  transactions  per  second  on  a 
four-node  cluster  of  low-end 
servers,  each  with  two  CPUs 

CLUSTER  SIZE:  Up  to  eight 
nodes  via  Gigabit  Ethernet;  larger 
configurations  require  a  dedicated 
cluster  interconnect 

SUPPORTED  OPERATING 

SYSTEMS:  Windows  2000/XP, 
Red  Hat  Linux,  SUSE  Linux,  AIX, 
HP-UX,  Solaris,  Mac  OS  X 

PRICING:  Free  for  use  in  open- 
source  projects;  under  $5,000 
per  CPU  for  commercial  users 


Group  Inc.  But  the  clustering 
tool  and  other  enhancements 
will  remove  “technical  road¬ 
blocks”  for  companies  that 
want  to  invest  in  an  open- 
source  database,  Garry  added. 

MySQL  Cluster  will  become 
available  first  with  the  exist¬ 
ing  MySQL  4.0  database.  Pric¬ 
ing  for  the  clustering  tool 
wasn’t  disclosed,  but  MySQL 
said  commercial  licenses  will 
cost  less  than  $5,000  per  CPU. 

At  the  conference,  MySQL 
also  previewed  MySQL  5.0  and 
a  new  graphical  user  interface, 
MySQL  Administrator,  that 
will  replace  its  existing  com¬ 
mand-line  interface  [Quick- 
Link  44191].  ©  46252 


Seattle  Mariners  Shut  Out  Spam 


BY  JAIKUMAR  VIJAYAN 

With  a  2-7  record  at  this  writ¬ 
ing,  the  Seattle  Mariners  have 
a  lot  of  problems  to  deal  with 
these  days. 

But  spam  isn’t  one  of  them. 
Not  now,  anyway. 

Until  about  three  months 
ago,  more  than  20%  of  the 
roughly  60,000  e-mails  the 
Mariners  received  weekly  were 
either  junk  mail  or  viruses.  For 
some  e-mail  accounts,  the  per¬ 
centage  was  as  high  as  95%. 

“Employees  were  being 
asked  to  manually  delete  each 
bad  e-mail,  which  cost  us  both 
time  and  money,”  said  David 
Curry,  director  of  IT  for  the 
baseball  team.  “In  addition,  we 
were  relying  solely  on  the  in¬ 
tegrity  of  the  users’  local  anti¬ 
virus  client  to  protect  the  net¬ 
work  from  [e-mail-based] 
viruses.” 

The  situation  threatened  the 
team’s  ability  to  respond  to 
fans  electronically.  So  in  Janu¬ 
ary,  the  Mariners  deployed 
spam-blocking  and  antivirus 
software  from  Computer  As¬ 
sociates  International  Inc. 

CA’s  eTrust  Secure  Con¬ 
tent  Manager  software  sifts 
through  HTTP,  e-mail  and  file 
transfer  protocol  traffic  look¬ 
ing  for  and  blocking  inappro¬ 
priate  e-mail  and  Web  content. 


The  software  allows  Curry  to 
define  policies  for  what  type 
of  content  is  acceptable. 

The  software  was  installed 
during  the  height  of  the  My- 
doom  virus  outbreak  in  late 
January  and  blocked  20,000 
infected  e-mails  during  that 
first  weekend,  Curry  said. 
“We’ve  had  zero  infections 
since  then,”  he  claimed,  and 
spam  has  dropped  by  95%. 

Spam-blacking  technologies 
are  becoming  increasingly  ef¬ 
fective,  said  Jim  Hurley,  an  an¬ 
alyst  at  Boston-based  Aber¬ 
deen  Group  Inc.  “It’s  becom¬ 
ing  more  of  a  manageable  is¬ 
sue”  through  the  use  of  block¬ 
ing  technologies,  he  said. 


Boscov’s  Department  Store 
LLC  in  Reading,  Pa.,  uses 
products  from  Cisco  Systems 
Inc.  and  Symantec  Corp.  to 
block  nearly  98%  of  the  e-mail 
traffic  it  receives.  Of  36,000 
messages  reviewed  recently, 
fewer  than  800  were  accepted 
as  legitimate  and  delivered, 
said  Joe  Poole,  the  retailer’s 
manager  for  technical  support. 
The  technology  has  done  an 
“excellent  job,”  he  added. 

©  46258 

moresmm^^H 

For  related  stories,  visit  our  spam  special 
coverage  page: 
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2:01AM  CHECKINTO  HOTEL2:11  AM 
CHECK  INTO  INTERNET2:26AM 
WORM  ENTERS  ROOM  536  2:28AM 
WORM  EVACUATED  BY  NETWORK 
2:32  AM  ORDER  GRILLED  CHEESE 
AND  FRIES  2:35AM  DOZE  OFF 

Your  mobile  workforce.  An  army  of  productivity  or  multiple  points  of  entry  ripe  for  intruders?  Enter  the  self-defending  network,  with  integrated  security  woven  throughout.  A  line  of 
defense  that  delivers  security  where  security  is  needed.  Wherever  you  do  business.  Inside  the  intranet.  Outside  the  intranet.  Across  the  Internet.  Even  in  hotel  rooms  on  the  other 
side  of  the  planet.  So  your  jet-lagged  mobile  workers  stay  safe  and  secure.  And  your  business  keeps  marching  forward.  To  learn  more  about  how  Cisco  can  help  plan,  design  and 

implement  your  network  security,  visit  cisco.com/securitynow.  SELF-DEFENDING  NETWORKS  PROTECT  AGAINST  HUMAN  NATURE. 
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McDonald’s  to  Supersize 
Use  of  Wi-Fi  Connections 


Will  offer  customers  wireless  services, 
tap  Wayport  net  for  cashless  payments 


BY  BOB  BREWIN 

cDONALD’S  CORP. 
last  week  an¬ 
nounced  plans 
to  install  public- 
access  Wi-Fi  connections  in 
6,000  restaurants  by  mid-2005. 
But  the  fast  food  chain  said  its 
Wi-Fi  services  deal  with  Way- 
port  Inc.  goes  far  beyond  pro¬ 
viding  wireless  Internet  ac¬ 
cess  to  customers. 

McDonald’s  will  also  use 
the  Wi-Fi  network  to  deliver  a 
wide  range  of  digital  content, 
including  MP3  music  Files,  and 
to  support  business  applica- 


CPU  Road 

BY  ROBERT  MCMILLAN 

IDG  NEWS  SERVICE 

As  part  of  a  downsizing  an¬ 
nounced  earlier  this  month,  Sun 
Microsystems  Inc.  is  stopping 
development  on  its  UltraSparc  V 
processor  and  a  device  called 
Gemini  for  low-end  servers 
[QuickLink  46146],  David 
Yen,  Sun’s  executive  vice 
president  of  processors, 
enterprise  systems  and 
low-end  Sparc  servers, 
last  week  spoke  with  the 
IDG  News  Service  about 
the  decision  to  put  all  of 
the  company’s  processor 
resources  into  multicore 
chips  that  can  process 
multiple  software  threads  simul¬ 
taneously,  an  approach  that  Sun 
calls  “throughput  computing.” 

How  did  you  arrive  at  the  decision 
to  terminate  Gemini  and  Ultra- 
Sparc  V?  Well,  the  quick  com¬ 
ment  is,  people  should  have  no 
doubt  about  our  belief  and  our 
vision  in  the  throughput  com¬ 
puting  area.  We  believe  in  it  so 
much  that  we  wanted  to  focus 


tions  such  as  its  cashless  pay¬ 
ment  system,  said  Jim  Sap- 
pington,  the  company’s  vice 
president  of  U.S.  IT. 

Austin-based  Wayport  plans 
to  install  high-speed  DSL  con¬ 
nections  in  3,000  McDonald’s 
restaurants  this  year  and  an¬ 
other  3,000  by  next  June.  Way- 
port  CEO  Dan  Vucina  said  the 
cashless  payment  system, 
which  supports  credit  card 
transactions  at  cash  registers 
and  drive-up  windows,  will  be 
separated  from  the  public- 
access  network  and  operate  on 
a  virtual  LAN  in  each  store. 


all  our  resources  on  trying  to 
expedite  its  development. 

We  did  spend  quite  some 
time  working  on  [UltraSparc 
V]  and  Gemini.  There  was  re¬ 
ally  nothing  wrong  with  those 
processors.  We  actually  taped 
out  both  of  them,  and  Gemini 
even  reached  the  point 
where  the  chip  was  ful¬ 
ly  working.  But  in  the 
Gemini  space,  we  have 
UltraSparc  Illi  and  Ul¬ 
traSparc  IIIi+  that  are 
doing  a  very  capable 
job.  In  the  [UltraSparc] 
space,  with  the  current 
UltraSparc  IV,  followed 
by  the  UltraSparc  IV+, 
and  then  with  the  upcoming 
Rock  and  Niagara  [multicore 
devices],  we  actually  believe 
that  this  is  probably  a  better 
road  map. 

Does  the  decision  to  cancel  Gemi¬ 
ni  and  UltraSparc  V  move  up  the 
ship  dates  for  Rock  and  Niagara? 

It  definitely  helps,  because  we 
are  moving  a  significant  num¬ 
ber  of  people  who  up  to  now 


Cashless  payments  require  a 
minimal  amount  of  band¬ 
width,  Vucina  said.  But  Way- 
port  will  use  internally  devel¬ 
oped  software  to  ensure  that 
credit  card  transactions  get 
priority  access  to  DSL  circuits 
and  that  no  single  application 
hogs  the  network  connections. 

Bandwidth  to  Go 

The  so-called  bandwidth¬ 
shaping  software  consists  of 
about  700,000  lines  of  Linux 
code  and  runs  on  a  Wayport- 
designed  router/gateway  that 
will  be  installed  at  each  Wi-Fi 
hot  spot,  said  Jim  Keeler,  Way- 
port’s  vice  president  of  engi¬ 
neering.  The  hardware  device 
will  manage  the  wireless 


had  been  working  on  Ultra¬ 
Sparc  V  to  work  on  the  Rock 
and  Niagara  family. 

When  do  you  now  expect  those 
two  processors  to  be  ready?  We 

have  said  Niagara  1  —  that’s 
our  first  Niagara  chip  —  will 
happen  probably  at  the  very 
beginning  of  2006,  and  the 
subsequent  members  of  the 
Niagara  family  and  the  Rock 
chip  will  follow  that. 

But  you  said  that  last  year.  How 
has  the  road  map  changed  as  a  re¬ 
sult  of  the  decision  on  UltraSparc 
V  and  Gemini?  It  certainly  will 
secure  the  schedule,  if  not 
help  to  move  it  up  earlier. 

What  does  this  mean  for  the  fu¬ 
ture  of  UltraSparc?  Is  that  product 
line  as  we  know  it  dead,  or  will 
there  be  future  UltraSparc  proc¬ 
essors?  All  of  these  throughput 
computing  processors  are 
Sparc-compatible.  Whether 
we  will  continue  using  the  Ul¬ 
traSparc  name  or  not,  that’s  a 
separate  decision.  But  these 


LANs  as  well  as  the  Wi-Fi  traf¬ 
fic  to  and  from  the  DSL  net¬ 
work  connection,  Keeler  said. 

McDonald’s  also  plans  to 
use  the  network  to  distribute 
employee  training  videos  to 
restaurants,  Wayport  said. 

The  digital  content  McDon¬ 
ald’s  will  deliver  via  the  Wi-Fi 
setup  includes  MP3  files  and 
digitized  versions  of  newspa¬ 
pers  and  magazines.  Wayport 
is  letting  users  download  pub- 


are  every  bit  Sparc  processors. 
When  one  of  them  comes  out, 
we  may  label  that  one  as  Ul¬ 
traSparc  V  to  continue  the  se¬ 
quencing,  if  that’s  still  the  way 
we  want  to  name  them. 

You  now  have  a  relationship  with 
Advanced  Micro  Devices  for  its 
Opteron  chip.  Would  you  consider 
using  another  type  of  core  archi¬ 
tecture  in  place  of  Sparc  as  you 
design  new  multicore  processors? 
We  will  be  working  closely 
with  AMD  on  Opteron-based 
Sim  systems.  However,  please 
understand  that  we  have  a 
more  than  $127  billion  in¬ 
stalled  base  [on  Sparc  technol¬ 
ogy].  It  is  Sun’s  obligation  to 
maintain  binary  compatibility. 

This  is  one  contract  Sun 
considers  very  seriously. 

But  you’re  right,  the  whole 
[throughput  computing]  inno¬ 
vation  does  not  necessarily  tie 
to  Sparc. 

So  do  you  eventually  expect  to 
base  throughput  computing  proc¬ 
essors  or  systems  on  AMD’s  tech¬ 
nology?  It  could  happen,  but  in 
this  particular  case,  it  involves 
[working  with]  AMD.  There¬ 
fore,  until  we  are  ready  and  we 
both  agree,  I  cannot  comment 
on  that.  O  46213 


lications  such  as  USA  Today 
and  BusinessWeek  in  PDF  files 
during  tests  of  the  Wi-Fi  ser¬ 
vice  at  McDonald’s  in  various 
metropolitan  areas. 

To  reduce  network  band¬ 
width  demands,  Wayport 
plans  to  cache  music  files  on 
the  in-store  router/gateways, 
which  are  equipped  with 
40GB  hard  drives.  The  Wi-Fi 
network  could  also  be  used  to 
distribute  movie  trailers  to 
customers  as  a  tie-in  to  the 
movie-based  meal  promotions 
McDonald’s  runs,  Vucina  said. 

Vince  Howell,  the  owner  of 
a  McDonald’s  franchise  in  Las 
Vegas,  N.M.,  said  Wi-Fi  could 
drive  more  traffic  to  his  res¬ 
taurant.  Howell  gets  about  40% 
of  his  business  from  Interstate 
25  travelers,  and  he  thinks 
wireless  capabilities  would  en¬ 
tice  people  with  laptops  that 
support  Wi-Fi  links  to  choose 
his  restaurant  instead  of  near¬ 
by  fast  food  rivals. 

Wayport  will  offer  two-hour 
Wi-Fi  sessions  at  a  cost  of  $2.95 
per  hour,  in  addition  to  other 
pricing  options,  such  as  a 
$29.95-per-month  unlimited 
service  plan  for  its  nationwide 
network,  which  is  currently 
available  in  700  hotels  and  six 
major  airports.  Pricing  for  the 
MP3  content  hasn’t  been  set. 

Amy  Cravens,  an  analyst  at 
In-Stat  MDR  in  Scottsdale, 
Ariz.,  said  a  fee-based  Wi-Fi 
services  like  the  one  at  Mc¬ 
Donald’s  need  to  differentiate 
themselves  from  free  services 
“either  by  the  quality  of  the 
connection  or  applications.” 

©  46251 
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Frankly  Speaking:  Frank  Hayes  says 
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Polycom  Adds  Desktop 
Videoconferencing  System 


VSX3000 

Polycom  Inc. 

■  PRODUCT  SUMMARY: 

Pleasanton,  Calif.-based  Poly¬ 
com  plans  to  announce  the  VSX 
3000  today.  The  device  is  a 
high-end  desktop  videoconfer¬ 
encing  system  that  combines  a 
camera,  microphone,  speakers, 
required  software  and  other 
components  with  a  17-in.  display 
that  can  double  as  a  PC  monitor. 
Polycom  said  the  system  sup¬ 
ports  H.264  video  compression, 
which  produces  much  sharper 
images  than  products  based  on 
the  older  H.263  standard  while 
utilizing  half  the  bandwidth. 

■  USER  EXPERIENCE:  Beta 
tester  Dave  Christensen,  senior 
videoconferencing  specialist  at 
the  headquarters  of  the  Church 
of  Jesus  Christ  of  Latter-day 
Saints  in  Salt  Lake  City,  de¬ 
scribed  the  VSX  3000’s  video 
and  sound  quality  as  “excep¬ 
tional"  and  comparable  to  that  of 
a  room-size  videoconferencing 
system.  But  at  a  price  of  nearly 
$5,000,  the  VSX  3000  also 
costs  about  as  much  as  a  room- 
size  unit,  Christensen  said.  The 
church  hasn't  decided  whether  it 
will  buy  any,  he  added. 


■  ANALYST  ASSESSMENT: 

The  VSX  3000  fills  a  hole  in  Poly¬ 
com's  product  line,  said  Andrew 
Davis,  an  analyst  at  Wainhouse 


Research  LLC  in  Brookline, 
Mass.  Polycom  made  earlier  at¬ 
tempts  to  crack  the  market  for 
executive-class  desktop  sys¬ 
tems,  but  none  were  successful, 
he  said.  “This  is  forthe  status¬ 
conscious  end  of  the  market,” 
Davis  added,  predicting  that  the 
ability  to  use  a  single  monitor  for 
both  PC  and  videoconferencing 
purposes  will  help  sales  of  the 
VSX  3000. 

■  OTHER  VENDORS  IN  THE 
MARKET:  Tandberg  ASA  and 
Sony  Corp.;  Cisco  Systems  Inc. 
plans  to  ship  a  desktop  video- 
conferencing  system  by  midyear. 

■  PRICE:  The  VSX  3000  starts 
at  $4,999. 

■  AVAILABILITY:  Now.  In  the 
fourth  quarter,  Polycom  plans  to 
add  an  optional  feature  that  will 
support  data  sharing  during 


videoconferencing  calls. 

-  Matt  Hamblen 
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Best  Buy 

she  said. 

The  agreement  isn’t  yet  a 
done  deal,  but  it’s  nearing 
completion,  said  Bryant. 

Based  on  information  that 
has  been  publicly  disclosed, 
the  Best  Buy  deal  appears  to 
differ  from  some  other  retail 
outsourcing  contracts,  includ¬ 
ing  the  10-year  agreement  that 
Sears,  Roebuck  and  Co.  is  ne¬ 
gotiating  with  Computer  Sci¬ 
ences  Corp. 

In  the  second  quarter,  Sears 
hopes  to  finalize  a  deal,  esti¬ 
mated  to  be  worth  $2  billion, 
that  calls  for  CSC  to  manage 
much  of  its  IT  infrastructure. 
About  260  of  the  retailer’s 
1,160  IT  workers  are  expected 
to  be  affected,  but  Sears  has 
said  it  expects  CSC  to  hire 
nearly  all  of  those  staffers. 

Testing  the  Waters 

John  McCarthy,  an  analyst  at 
Forrester  Research  Inc.  in 
Cambridge,  Mass.,  said  most 
large  retailers  are  doing  some 
experimenting  with  outsourc¬ 
ing  and  offshoring  as  they  try 
to  beef  up  technology  initia¬ 
tives  on  low  budgets.  But  com¬ 
panies  typically  outsource 
only  a  selected  or  commodi¬ 
tized  piece  of  IT,  such  as  the 
infrastructure  or  maintenance. 
“What  Best  Buy  is  doing  is 
unique,  and  it’s  unique  in  most 
industries,”  he  said.  “Most 
companies  don’t  necessarily 


want  to  get  rid  of  all  of  IT.” 

Accenture,  however,  noted 
that  the  potential  Best  Buy 
arrangement  isn’t  unprece¬ 
dented.  In  late  2000,  London- 
based  grocery  chain  J  Sains- 
bury  PLC  signed  a  seven-year 
deal  to  outsource  its  entire  IT 
operation  to  Accenture  and 
claimed  it  expects  to  save 
about  $50  million  per  year. 
Sainsbury  transferred  about 
800  employees  to  Accenture 
and  retained  a  small  in-house 
staff  to  oversee  the  company’s 
IT  strategy  and  manage  the 
Accenture  contract. 

“Sainsbury  and  Best  Buy  are 
very  much  focused  on  con¬ 
tracting  for  bottom-line  busi¬ 
ness  results,  and  they  believe 
they  can  achieve  that  by  a 
more  holistic  outsourcing  re¬ 
lationship,  rather  than  out¬ 
sourcing  bits  and  pieces,”  said 
Angela  Selden,  managing  part¬ 
ner  of  Accenture’s  North 
American  consumer  and  in¬ 
dustrial  practice. 

Selden  said  a  retailer  can 
hold  a  third-party  provider  ac¬ 
countable  with  a  combination 
of  a  service-level  agreements 
and  business  outcomes  that  are 
written  into  the  contract.  The 
outsourcer,  in  turn,  makes  sure 
resources  are  focused  on  what¬ 
ever  delivers  the  most  business 
benefit  to  the  retailer,  she  ex¬ 
plained.  “Service-level  agree¬ 
ments  rarely  exist  between  in¬ 
ternal  IT  organizations  and 
their  business  counterparts,” 
Selden  said. 

She  said  many  retailers  have 


capable  IT  leadership  teams, 
but  the  pace  at  which  a  third 
party  with  IT  expertise  can 
make  changes  could  make  out¬ 
sourcing  attractive  to  retailers 
that  are  saddled  with  older 
proprietary  or  heavily  cus¬ 
tomized  systems  to  manage 
their  businesses.  “Retailers  are 
very  disadvantaged  today  be¬ 
cause  of  this  archaic  infra¬ 
structure,”  Selden  said. 

Accenture  advocates  taking 
“packaged  vanilla  solutions 
and  weaving  them  together  in 
as  simple  a  fashion  as  possi¬ 
ble”  and  changing  business 
processes,  rather  than  heavily 
customizing  software,  as  the 
most  cost-effective  approach 
for  retailers,  Selden  said. 

Selden  said  she  recognizes 
that  the  approach  would  rep¬ 
resent  a  dramatic  change  for 
the  legions  of  retailers  that 
claim  they  had  to  heavily  cus¬ 
tomize  systems  because  of  the 
unique  needs  of  their  busi¬ 
nesses.  But  she  said  they  must 
change  the  way  they  do  busi¬ 
ness  in  order  to  be  nimble 
enough  to  “absorb  innovation 
quickly.” 

In  September,  Plano,  Texas- 
based  Electronic  Data  Systems 
Corp.  announced  a  multiyear 
contract  with  Best  Buy  to  pro¬ 
vide  help  desk  and  problem 
management  services  to  its 
stores  and  corporate  users. 

Spokeswomen  for  both  Best 
Buy  and  EDS  said  the  Best 
Buy-EDS  contract  won’t  be 
affected  by  the  Accenture 
deal.  ©  46253 
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H-1B 


Sun  Microsystems  Inc. 

This  year’s  H-1B  cap  of 
65,000  was  reached  in  mid- 
February,  less  than  five 
months  after  the  Oct.  1  start 
of  the  federal  fiscal  year. 
Smith’s  bill,  the  American 
Workforce  Improvement  and 
Jobs  Protection  Act,  wouldn’t 
raise  the  cap,  but  it  would  ex¬ 
empt  from  that  limit  up  to 
20,000  graduates  with  a  mas¬ 
ter’s  degree  or  higher  from  a 
U.S.  university. 

Students  hired  by  universi¬ 
ties  and  research  institutions 


under  the  H-1B  program  are 
already  exempt  from  the  cap. 

Most  of  the  H-lBs  that  U.S. 
companies  are  hiring  “are 
coming  out  of  our  own 
schools,”  said  Thom  Stohler,  a 
vice  president  at  the  American 
Electronics  Association,  a 
Washington-based  IT  trade 
group  that  has  called  for  a 
higher  H-1B  cap.  Businesses 
“are  not  going  to  Bangalore  to 
find  people;  they  are  finding 
them  here,”  he  said. 

“It’s  the  position  of  the  AEA 
that  individuals  who  possess  a 
master’s  or  Ph.D.  degree  are 
not  stealing  American  jobs; 
they  are  creating  American 
jobs,”  said  Stohler.  Holders  of 


advanced  degrees  tend  to  be 
employed  in  research  and  de¬ 
velopment  work,  he  said. 

Under  U.S.  immigration  law, 
companies  were  allowed  to 
begin  applying  this  month  for 
H-1B  visas  that  will  be  issued 
at  the  start  of  the  2005  fiscal 
year.  Vic  Goel,  an  immigration 
attorney  in  Greenbelt,  Md., 
said  he  expects  that  there  will 
be  enough  applications  be¬ 
tween  now  and  Oct.  1  to  ex¬ 
haust  next  year’s  cap  of  65,000 
visas.  He  said  the  period  for 
issuing  new  H-1B  visas  that 
will  begin  on  Oct.  1  could 
close  the  next  day. 

Any  increase  in  the  number 
of  H-1B  visa  holders  will  face 


opposition  from  labor  groups, 
especially  the  IEEE-USA,  a 
unit  of  the  Institute  of  Electri¬ 
cal  and  Electronics  Engineers 
Inc.  in  Washington  that  says 


Foreign  Factor 

Of  35,139  engineering 
students  who  earned 
graduate  degrees  from  U.S. 
universities  last  year,  foreign 
nationals  accounted  for: 


its  members  are  facing  record 
unemployment  levels. 

“We  question  the  need  for  a 
new  visa  exemption,”  said 
IEEE-USA  President  John 
Steadman,  who  noted  that  for¬ 
eign  graduate  students  can  al¬ 
ready  work  for  two  years  in 
the  U.S.  under  existing  visa 
rules.  “During  that  time,  the 
company  can  evaluate  their 
skills  and  petition  for  a  green 
card  on  their  behalf,”  he  said. 

The  bill’s  prospects  are  un¬ 
certain.  The  co-sponsors  are 
all  Republican,  and  this  is  a 
contentious  year  for  outsourc¬ 
ing.  But  Congress  has  acted 
before  to  increase  the  H-1B 
cap  in  election  years.  ©  46257 
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With  its  modular,  scalable  and  open  building  blocks,  it's  no 

wonder  InfraStruXure's  rack-based  architecture  is  winning  over 
editors  and  end-users  alike  -  especially  as  blade  servers  and 
server  consolidation  cause  power  densities  to  skyrocket. 

If  you're  not  already  dealing  with  such  high  power  densities, 
the  chances  are  you  will  be  soon.  An  on-demand  architecture 
for  NCPI*,  InfraStruXure™  includes  power,  cooling,  racks  and 
physical  structure,  security  and  fire  protection,  cabling,  and  the 
management  and  servicing  of  these  elements.  It  is  specifically 
designed  to  meet  ever-changing  IT  requirements  through 
scalable,  modular  and  standardized  components. 

For  high  density  applications,  the  InfraStruXure  High  Density 
Configuration  is  a  patent-pending  hot  aisle  containment  system 
that  cools  up  to  20kW  in  a  single  enclosure. 

Flexible  enough  to  be  moved  or  changed  without  system 
reconfiguration,  the  InfraStruXure  High  Density  Configuration 
can  also  be  scaled  to  meet  changing  needs  and  future 
expansion.  This  makes  it  a  perfect  solution  for  converted 
spaces,  as  well  as  high-density  areas. 


"More  computing  power,  but  with  more  heat... 
presents  a  serious  problem  for  companies  unprepared  to  meet  the 

cooling  demands  of  a  data  center. 
APC  plays  the  hero 
with  a  three-component 
environmental  system. " 


On-demand  architecture  for  network- 
critical  physical  infrastructure 


Introducing  InfraStruXure 
High  Density  Configuration 

The  InfraStruXure"'  High  Density  Configuration 

is  a  patent-pending  hot  aisle  containment  system 
that  cools  up  to  20kW  of  blade  servers  in 
a  single  enclosure. 


The  InfraStruXure  High  Density 
Configuration  is  ideal  for: 

•  Disaster  Recovery  Sites 

•  Blade  Server  Applications 

•  Converted  Spaces 


Hot-Aisle  Ceiling  Tiles/  Cable  Trough 
Seals  in  hot  air,  prevents  mixing  with  room  air 


Power 

Distribution  Unit(PDU) 


UPS 


Chambers  Doors 
Access  to  hot 
aisle,  locks  for 
security 


NetworkAIR  FM 
In-row  air  conditioner 
cools  hot  chamber  air 
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The  InfraStruXure “ 
Build-Out  Tool  lets 
you  design  and 
specify  InfraStruXure 
solutions  using 
a  Web-based 
configurator. 
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Oliver  Rist,  Senior  Contributing  Editor; 
Brian  Chee,  Industry  Expert 
Info  World,  3/12/2004 


To  learn  more  about  InfraStruXure,  call  1-888-ISX-2990  today  or  visit  us  at  www.apc.com. 

•  Network-critical  Physical  IntrasVucture  (NCPI)  is  the  foundation  upon  which  IT  and  telecommunication  networks  reside. 


Receive  your  FREE  APC 
White  Paper 

"Cooling  Audit  for  Identifying 
Potential  Cooling  Problems  in 
Data  Centers" 

Visit  http://promo.apc.com 
Enter  Key  Code  q703y 
Call  888-289-APCC  x3129 
Fax  401-788-2797 


Legendary  Reliability* 


Your  role  is  expanding. 

As  business  infrastructure  moves  to  the  forefront,  your  company 
relies  on  you  to  keep  existing  systems  at  peak  performance  while 
tackling  a  broad  range  of  new  requirements.  Securing  wireless 
networks,  implementing  collaboration  technologies,  improving 
regulatory  compliance,  ensuring  business  continuity — all  while 
doing  more  with  less. 

Enterprise  challenges  demand 
end-to-end  solutions. 

As  networking  and  communications  professionals,  you  need  to 
focus  on  an  end-to-end,  system-wide  approach  when  building 
and  optimizing  your  business  infrastructure: 


»  Security 
»  Wireless 

»  Collaboration  and  VoIP 


»  Performance 
»  Data  Center  and  Storage 
» Infrastructure  and  Services 


Pre-register  by  May  8th. 

Go  to  INTEROP.com  today  for  details  and  registration. 

Use  Priority  Code:  ADACZ2ND 


Put  it  all  together. 

Only  NetWorld+Interop  brings  you  the  latest  strategies,  techniques 
and  products  for  every  point  in  your  infrastructure — and  shows 
you  how  they  can  add  up  to  an  integrated,  end-to-end  solution 
that  meets  every  requirement  on  your  list. 

Make  the  connection  at  NetWorld+Interop. 

For  17  years,  NetWorld+Interop  has  helped  networking 
professionals  take  their  enterprises  and  their  careers  to  the  next 
level.  At  NetWorld+Interop  Las  Vegas  2004,  you'll  make  the 
industry's  best  ideas  and  latest  technologies  relevant  to  your 
needs,  and  discover  that  even  the  toughest  networking  challenge 
is  all  in  a  day's  work. 
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The  End-to-End  Networking  and  Communications  Event 
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Offshore  Moves  Can  Bring 
Benefits,  but  Not  Without  Pain 

Users  cite  savings  potential  and  better 
flexibility,  warn  of  internal  challenges 


BY  LINDA  ROSENCRANCE 

NEWTON.  MASS. 

At  first,  offshoring  didn’t  sit 
well  with  Dave  Andre,  chief 
technology  officer  at  Upromise 
Inc.  But  economic  realities  ul¬ 
timately  forced  him  to  send 
some  IT  work  overseas. 

“Our  primary  objective  was 
to  save  money,”  Andre  said 
during  a  panel  discussion  on 
offshore  outsourcing  at  a 
Massachusetts  Software 
Council  meeting  here  last 
week.  “We  were  hoping  to 
have  secondary  benefits,  but 


if  we  didn’t  save  money,  it 
wasn’t  worth  going  forward.” 

Upromise  offers  a  free  ser¬ 
vice  that  lets  families  earn 
money  for  college  when  they 
make  purchases  from  affiliat¬ 
ed  stores,  restaurants  and  on¬ 
line  retailers;  it  also  operates  a 
college  savings  investment 
fund.  In  late  2002,  the  Need¬ 
ham,  Mass.-based  company 
began  outsourcing  some  soft¬ 
ware  development  and  sys¬ 
tems  administration  work  to 
Wipro  Ltd.,  which  now  has 
about  30  staffers  in  Bangalore, 


India,  assigned  to  Upromise. 

Andre  wouldn’t  disclose 
specific  figures,  but  he  said 
Upromise  shaved  its  IT  bud¬ 
get  by  10%  to  20%  in  the  first 
year  of  the  offshore  contract 
and  expects  more  savings  in 
the  future.  “The  cost  savings 
are  real,”  he  said. 

Some  of  the  secondary  ben¬ 
efits  that  Upromise  has  gotten 
include  a  round-the-clock  IT 
operation  with  “follow  the 
sun”  development  and  quality- 
assurance  capabilities,  better 
internal  development  process¬ 
es  and  increased  staffing  flexi¬ 
bility,  Andre  noted. 

But  he  acknowledged  that 
the  offshore  move  has  also  re¬ 


sulted  in  some  painful  experi¬ 
ences,  such  as  the  need  to  lay 
off  IT  staffers  in  the  U.S. 
“Transitions  are  hard  work,” 
Andre  said.  “If  I  had  it  to  do 
again,  I  would  start  from  Day  1 
with  an  offshore  outsource 
model.”  In  a  follow-up  inter¬ 
view,  he  said  switching  to  an 
offshore  approach  “causes 
angst  to  your  employee  base, 
and  it  causes  angst  to  you.” 

Upromise  also  outsourced 
some  call  center  functions  to 
Daksh  eServices  Pvt.,  a  busi¬ 
ness  process  outsourcing  firm 
in  Gurgaon,  India,  that’s  being 
acquired  by  IBM.  Andre  said 
the  two  deals  taught  Upromise 
executives  that  communicat¬ 
ing  with  employees  about  off¬ 
shoring  plans  is  important  and 
that  offshore  training  needs 
and  overhead  costs  will  likely 
be  larger  than  expected. 

Swapnil  Shah,  the  CEO  of 


mValent  Inc.,  a  software  ven¬ 
dor  in  Tewksbury,  Mass.,  said 
his  company’s  approach  to  off¬ 
shore  outsourcing  was  to  cre¬ 
ate  parallel  engineering  teams 
in  the  U.S.  and  India.  That  en¬ 
ables  the  engineering  staff  to 
work  an  18-hour  day,  he  said, 
adding  that  the  offshore  strat¬ 
egy  has  resulted  in  lower  costs 
and  faster  time  to  market. 

Choosing  a  business  partner 
with  the  requisite  technical 
skills  was  critical,  Shah  said. 

Sandeep  Swadia,  head  of 
marketing  at  Virtusa  Corp.,  a 
software  developer  and  IT 
services  provider  in  Westboro, 
Mass.,  agreed.  “There  are  dif¬ 
ferent  horses  for  different 
courses,  and  you  have  to  pick 
the  right  one  for  the  right  job,” 
he  said.  “Make  sure  their  vi¬ 
sion  matches  your  vision.  The 
focus  just  can’t  be  cost.” 
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Introducing  Firebox9  X.  It’s  all  the  integrated,  expandable  network 
security  your  company  really  needs.  All  inside  one  intelligent  box. 
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WatchGuard 

Firebox^ 


FREE  NETWORK 
SECURITY  GUIDE 


11  Reality  Checks  to  Get  yours  by  visiting  www.watchguard.com/cwcya 

Help  the  CEO  ‘CYA’  or  by  calling  1-877-732-8780. 


UUc 

The  Security  You  Really  Need. w  WatchGuartf^jF 
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Disaster  Homework 


Don’t  Own 
Your  IT 


SOME  MONTHS  AFTER  the  9/11  attacks,  I 
interviewed  the  CIO  of  a  large  Wall  Street 
law  firm  located  only  blocks  from  the  col¬ 
lapsed  World  Trade  Center  towers.  She 
talked  about  the  tremendous  outpouring 
of  sympathy  and  concern  from  hundreds  of  the  at¬ 
torneys’  clients  in  the  24  hours  after  the  disaster. 


Then  Day  2  dawned, 
and  the  story  changed. 

The  clients  who  called 
wanted  reassurances  that 
their  files  were  safe  and 
that  business  would 
promptly  get  back  on 
track.  I  remember  being 
shocked  by  the  self-cen¬ 
tered  attitude  of  those 
demanding  customers. 

But  it  was  a  reminder 
that  even  a  major  disas¬ 
ter  has  a  short  shelf  life 
as  an  excuse  in  the  business  world. 
What  matters  most  is  the  speed  and 
effectiveness  of  recovery. 

So  it’s  odd  that  nobody  likes  to 
talk  about  disaster  recovery.  Ven¬ 
dors  use  euphemisms  like  “business 
continuity”  to  avoid  those  two  scary 
words.  Companies  give  lip  service 
to  how  important  such  planning  is 
but  then  fail  to  fund  programs  to 
test  their  own  disaster  plans. 

We  recently  surveyed  IT  profes¬ 
sionals  from  companies  with  disaster 
recovery  plans.  When  asked,  “Could 
you  locate  your  disaster  recovery 
plan  in  the  next  five  minutes?”  one- 
third  of  the  227  respondents  admit¬ 
ted  they  couldn’t.  Of  281  IT  pros 
asked  how  often  they  perform  re¬ 
mote-office  data  backups,  only  58% 
said  they  were  doing  so  every  day. 

With  all  the  risks  to  manage  in  the 
world  today,  from  natural  disasters 
to  man-made  ones,  you’d  think  this 
little  item  would  be  at  the  top  of  the 
“Important  Things  We  Do  to  Stay  in 
Business”  list.  We  learned  otherwise 
in  talking  with  a  host  of  experts  and 
executives  for  this  week’s  Knowl¬ 
edge  Center  on  disaster  recovery 


MARYFRAN  JOHNSON  is 

editor  in  chief  of  Comput- 
erworld.  You  can  contact 
her  at  maryfran Johnson® 
computerworM.com. 


(beginning  on  page  33, 
and  at  QuickLink  a4300). 
Many  of  our  sources 
made  it  clear  that  this  is 
truly  more  of  a  business 
issue  than  a  technology 
one.  But  guess  who’s 
usually  in  charge  of  the 
disaster  response  plan? 
IT,  of  course. 

Don  O’Connor,  CIO  at 
Southern  California  Wa¬ 
ter  Co.,  contends  that 
even  underprepared  IT 
organizations  have  at  least  given 
some  thought  to  system  recovery 
and  uptime  restores.  But  business 
units  are  much  more  likely  to  be 
clueless  about  their  roles.  “In  my  ex¬ 
perience,  IT  can  respond  relatively 
quickly,”  O’Connor  says.  “The  part 
that’s  missing  is  the  users.” 

If  that’s  the  situation  at  your  com¬ 
pany,  what  should  you  do  about  it? 


In  this  issue,  we  provide  plenty  of 
cost-conscious  tips  and  insider  ad¬ 
vice  from  IT  managers  who  have 
faced  disaster  and  recovered.  Their 
experiences  raise  questions  you 
should  be  able  to  answer.  For  starters: 

■  How  strong  is  your  disaster  re¬ 
covery  documentation?  What  if  the 
head  of  sales  is  the  one  who  has  to 
turn  on  the  systems  in  the  data  cen¬ 
ter?  “We  fashion  our  document  so 
anyone  in  the  business  should  be 
able  to  restart  an  application,”  says 
Elbert  Lane,  a  lead  software  devel¬ 
oper  at  Gap  Inc.  in  earthquake- 
prone  San  Francisco. 

■  Which  applications  are  really 
the  most  important  ones  to  restore 
first?  At  most  companies,  it’s  proba¬ 
bly  e-mail,  not  the  SAP  system  or 
the  Oracle  database. 

■  How  robust  and  ready  are  the 
plans  at  your  suppliers,  your  out¬ 
sourcers,  your  business  partners? 
Who’s  checking  on  them? 

■  What  are  your  most  critical  ac¬ 
cess  issues?  Getting  to  the  data,  the 
systems  or  the  people? 

Disaster  recovery  is  one  test  that 
IT  can  ace  —  without  big  budgets  or 
expensive  consultants.  It’s  a  matter 
of  common-sense  planning,  atten¬ 
tion  to  process  and  doing  your  dis¬ 
aster  homework.  ©  46219 
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WHAT  BUSINESS  are 
you  in? 

If  you’re  not  in  the 
IT  business,  pull  the  plug  on 
your  IT  department.  And  I’m 
not  talking  about  sending  the 
jobs  to  India. 

Kansas  City,  Mo.-based  H&R  Block 
decided  in  1999  that  it’s  not  in  the  IT 
business.  So,  rather  than  building  an 
IT  infrastructure,  the  tax  preparer 
turned  to  Eden  Prairie,  Minn.-based 
Digital  River. 

H&R  Block  wanted  someone  to 
handle  the  IT  that  pumps  out  all  those 
tax  forms.  It  wanted  round-the-clock 
uptime.  It  wanted  all  the  bells  and 
whistles  that  come  with  remote  and 
redundant  data  centers.  And  it  wanted 
an  easy  interface  so  it  could  quickly 
change  product 
offerings  and  pro¬ 
motions. 

Sure,  in  every 
company  there  are 
those  who  contend 
that  homegrown  IT 
is  necessary  because 
the  business  is 
unique.  Or  that  you 
need  your  own  IT 
operation  because 
there’s  no  way  to  off¬ 
load  responsibility 
for  maintenance  and  changes  in  a  high- 
pressure  environment. 

Well,  imagine  compressing  a  year’s 
worth  of  business  into  four  months. 

That’s  life  at  H&R  Block,  where  fran¬ 
tic  taxpayers  download  tax-preparation 
software  at  the  last  minute.  (January 
and  April  are  the  heaviest  months.) 

The  company  has  moved  97%  of  its 
software  business  to  the  Internet  and 
doesn’t  have  an  IT  department  keeping 
an  eye  on  things.  Instead,  Digital  River 
runs  routine  tests  to  measure  the  abili¬ 
ty  of  H&R  Block’s  Web  site  to  handle 
the  strain  of  all  those  downloads. 

The  strategic  advantage  of  having  a 
third-party  partner  operate  your  site  is 
clear:  You  get  to  do  what  you  do  best. 

For  your  IT  needs,  you  simply  build 
a  relationship  with  a  vendor.  Then 
you’re  just  one  phone  call  away  from 
high-quality  service. 

And  you  save  money.  Erik  Johnson, 
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Connect  proven 
mobile  and  wireless  solutions 
to  your  enterprise  strategy 

Attend  the  content-rich  conference  that  sees  an  enterprise  without  wires 
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Attend  Computerworld’s 
Executive  Conference  on 
Mobile  and  Wireless 
Technologies! 

Mobile  and  wireless  technologies  push  the  enterprise 
envelope  every  day,  from  customer-facing  applications  all 
the  way  to  the  factory  floor.  With  the  proliferation  of 
mobile  and  wireless  applications,  devices  and  services, 
how  can  you  keep  your  enterprise  on  the  cutting  edge? 
How  can  you  find  today's  most  promising  mobile  and 
wireless  technologies?  And  how  can  you  learn  how  other  companies  and  industries 
apply  the  latest  and  greatest  mobile  and  wireless  tools? 

At  Mobile  &  Wireless  World,  you  will: 

•  Hear,  discuss  and  witness  winning  mobile  and  wireless 
strategies  in  the  enterprise 

•  Gain  first-hand  knowledge  that  can  enhance  your  own 
company’s  mobile  and  wireless  strategy 

•  Examine  the  industry’s  major  issues  and  challenges 

•  See  developing  technologies 

•  Network  with  peers 

•  Meet  potential  partners 

•  Converge  with  analysts  and  press 

•  Take  home  practical  tips  and  knowledge  of 
technologies  you  can  implement  right  away 


Visionary  &  Featured  Speakers 


Dan  Gillmor 

Technology  Columnist 
San  Jose  Mercury  News 

Dan  Gillmor  is  technology  columnist  for  the  San  Jose 
Mercury  News,  Silicon  Valley's  daily  newspaper.  He  also 
writes  a  daily  Web-based  column  for  SiliconValley.com,  a 
KnightRidder.com  site  that  is  an  online  affiliate  of  the 
Mercury  News.  His  column  runs  in  many  other  U.S.  newspa¬ 
pers,  and  he  appears  regularly  on  radio  and  television.  He 
has  been  consistently  listed  by  industry  publications  as 
among  the  most  influential  journalists  in  his  field. 


a  Ken  Pasley 

VP 

FedEx  Internet  Technology 

Ken  Pasley  provides  leadership  for  the  FedEx  Express 
worldwide  wireless  and  mobile  architecture.  In  this  position, 
he  oversees  strategy,  engineering,  and  development  of  wire¬ 
less  technology,  including  FedEx  PowerPad,  FedEx  Private 
Network  and  Bluetooth  implementation. 

Roger  Gurnani 

VP  &  CIO 

Verizon  Wireless 

As  CIO,  Roger  Gurnani  is  responsible  for  the  information 
systems  portfolio  development  and  operation  of  data  cen¬ 
ters  and  communications  facilities  for  the  nation's  largest 
wireless  voice  and  data  network,  which  serves  36  million 
customers. 
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H&R  Block’s  manager  of  online  soft¬ 
ware  marketing,  says  breaking  out  of 
the  traditional  method  of  delivering 
software  in  boxes  has  cut  H&R  Block’s 
cost  of  shipping  and  materials  while 
helping  customers,  who  don’t  have  to 
wait  for  tax  software  to  arrive.  It  has 
also  eliminated  expensive  inventory. 

Of  course,  H&R  Block  is  reaping  the 
rewards  of  greater  consumer  access  to 
broadband  connections.  But  it  has 
been  able  to  translate  that  trend  into  a 
10%  drop  in  the  number  of  customer 
support  questions.  It  has  also  cut  the 
number  of  phone  operators  and  mail¬ 
processing  agents. 

What  trend  have  you  taken  advan¬ 
tage  of  lately? 

And  since  Digital  River  handles  all 
IT  support,  all  uploading  and  down¬ 
loading  of  software,  and  all  upgrades 
and  problems,  H&R  Block  can  con¬ 
centrate  on  marketing  and  product 
changes.  The  company  also  gets  imme¬ 
diate  access  to  sales-traffic  and  trans¬ 
action  reports. 

So  stop  spending  time  and  money 
owning  and  operating  an  IT  system. 

Do  something  useful,  like  your  taxes. 

©  46067 

THORNTON  A.  MAY 

Floaters, 
Swimmers 
And  Sinkers 

The  current  crop  of 
IT  bosses  scores  pretty 
good  marks  in  leader¬ 
ship.  It’s  their  reports  who  are 
of  greater  concern  to  futurists 
and  who  are  the  specific  focus 
of  research  aimed  at  assessing 

leadership  skills. 

In  conjunction  with  ongoing  cur¬ 
riculum-design  efforts,  the  IT  Leader¬ 
ship  Academy  at  Florida  Community 
College  of  Jacksonville  asked  120  IT 
bosses  to  conceptualize  their  direct 
reports  as  “beakers”  of  leadership 
skills.  The  evaluators  hypothesized 
that  not  all  the  beakers  would  be  full. 

We  questioned  IT  bosses  about 
“patterns  of  emptiness”  in  the  leader¬ 
ship  beakers  of  their  direct  reports. 

The  interviews  demonstrated  that  al¬ 
though  IT  shops  may  have  the  leader¬ 
ship  they  need  today,  they  may  not 
have  it  tomorrow. 

The  bosses  we  talked  to  each  had 


three  to  18  direct  reports. 

(The  median  number  was 
six.)  Of  the  entire  popu¬ 
lation  of  direct  reports, 

18%  were  judged  by  their 
bosses  to  have  full  leader¬ 
ship  beakers. 

These  full-beaker  direct 
reports  were  seen  as  shar¬ 
ing  several  characteristics. 

They  were  aware  and  adap¬ 
tive  individuals,  first-class 
“noticers”  who  were  able  to 
respond  creatively  and  with 
presence  of  mind  to  changes 
in  the  environment.  They  were  also 
compelling  communicators  who  were 
able  to  engage  others  through  shared 
meaning  and  to  create  a  sense  of  ur¬ 
gency  for  the  task  at  hand.  They  were 
found  to  be  masters  of  organizational 
culture,  meaning  they  knew  how  the 
organization  really  worked.  They  were 
comfortable  and  conversant  with  fi¬ 
nancial  and  accounting  processes  and 
terms  and  knowledgeable  about  busi¬ 
ness  drivers  and  opportunities.  They 
were  connected  to  key  players  both  in¬ 
side  and  outside  the  enterprise,  and 
they  were  perceived  as  being  authentic 
and  high-integrity  human  beings. 

We  also  looked  at  five  leadership  at¬ 
tributes  of  the  82%  of  the  direct  reports 


not  blessed  with  overflow¬ 
ing  beakers:  attitude,  men¬ 
tal  model,  energy,  connect¬ 
edness  and  curiosity. 

Analysis  revealed  the 
following  three  subspecies 
of  direct  reports: 

Sinkers:  About  12%  of  the 
less-than-full-beaker  popu¬ 
lation.  These  aren’t  happy 
employees.  They  tend  to 
have  a  chip  on  their  shoul¬ 
ders  and  nurture  resent¬ 
ment  against  the  organiza¬ 
tion.  Their  mental  model  is 
self-centered;  they  do  the  work  placed 
in  front  of  them  and  little  else.  Their 
energy  is  low,  they’re  unconnected  to 
both  the  internal  and  external  commu¬ 
nities,  and  they  have  no  curiosity. 

Floaters:  About  50%  of  the  less-than- 
full  population.  They  have  good  atti¬ 
tudes  and  reasonable  energy  for  the 
tasks  in  front  of  them,  but  they’re  a 
little  lean  when  it  comes  to  being 
connected  to  the  driving  mental  mod¬ 
el  of  the  enterprise,  and  they  lack  the 
curiosity  and  energy  to  connect  to 
people  who  might  be  able  to  explain 
the  big  picture  to  them  —  how  IT 
adds  value  or  where  it’s  going  in  the 
company. 

Swimmers:  About  38%  of  the  less- 


than-full-beaker  population.  Swim¬ 
mers  are  positive  and  upbeat,  if  unfo¬ 
cused.  They  lack  a  mental  model  but 
would  buy  into  one  if  it  was  explained 
to  them.  They  have  good  energy  and 
like  hard  work.  They  are  easy  to  con¬ 
nect  with  but,  sadly,  are  underconnect¬ 
ed.  They  have  curiosity  but  haven’t 
acted  on  it. 

Swimmers  are  the  future  of  the  orga¬ 
nization.  If  treated  respectfully,  their 
attitudes  will  blossom.  Involving  them 
in  enterprise  strategy  formulation, 
along  with  focused  investment  in  man¬ 
agement  development  programs  and 
sponsorship  of  networking  opportuni¬ 
ties,  will  fill  their  beakers  to  the  brim. 

Floaters  can  be  groomed  to  become 
swimmers,  if  they’re  mentored  and  if 
you  can  convince  them  that  what  they 
do  really  matters.  Sinkers  usually  do 
nothing  other  than  sink. 

Investing  in  the  leadership  skills  of 
direct  reports  is  one  of  the  best  IT  in¬ 
vestments  you  can  make.  By  granting 
the  freedom  to  learn  and  to  teach,  you 
will  bestow  upon  your  company  the 
freedom  to  print  money.  ©  46155 
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To  Lead  or  Follow? 

IS  IT  RELEVANT?  Bob  Metcalfe 
and  Nicholas  6.  Carr  are  both 
right  [“Speakers  Clash  in  Spirited 
Debate  Over  IT  Relevance,"  Quick- 
Link  45408].  In  many  companies 
that  simply  follow  the  lead  of  inno¬ 
vators  and  use  dominant  platforms 
and  systems,  IT  isn't  worth  spend¬ 
ing  money  on.  In  cases  like  that, 
you’re  best  off  keeping  the  technol¬ 
ogy  around  but  not  doing  anything 
special.  Followers  such  as  these 
prove  Carr  right  every  day.  Nobody 
ever  got  fired  for  choosing  what 
everyone  else  chooses. 

Metcalfe  chooses  the  path  of  ex¬ 
cellence.  For  leaders,  there  are  still 
places  to  find  competitive  advan¬ 
tage  using  IT.  The  problem  is  that  if 
you're  breaking  a  trail,  you  may  not 
always  use  the  easiest  path.  That  is 
time-consuming  and  costly. 

There’s  a  huge  difference  be¬ 
tween  avoiding  a  competitive  disad¬ 
vantage  and  providing  a  competitive 
advantage.  One  is  hard.  It  requires 
imagination  and  courage.  One  is 
easy.  It  requires  solid  management 


skills.  Either  choice  may  be  appro¬ 
priate  in  a  given  situation.  Neither  is 
wrong.  Where  do  you  want  to  go? 
Alma  J.  Wetzker 
Former  IT  manager,  Minne¬ 
apolis,  almaw@comcast.net 

IT’S  NOT  SO  SURPRISING  that 
Metcalfe  and  Carr  were  talking 
right  past  each  other.  Carr’s  point 
was  simply  that  IT,  in  and  of  itself, 
may  not  provide  a  competitive  ad¬ 
vantage.  Metcalfe's  point  was  that 
IT  innovation  and  those  who  skillful¬ 
ly  take  advantage  of  it  early  on  will 
get  a  competitive  advantage. 

The  message  to  be  derived  from 
both  men  is  that  any  competitive  ad¬ 
vantage  from  IT  innovation  may  be 
short-lived.  As  a  consequence,  for  a 
company  to  maintain  an  advantage 
through  IT,  it  will  need  to  continuous¬ 
ly  invest  in  new  IT  capabilities,  and 
this  investment  will  need  to  be  done 
in  the  most  effective  way  possible. 

As  history  has  shown,  successful 
implementation  of  new  technolo¬ 
gies  is  a  hit-or-miss  affair;  some¬ 
times  it’s  successful,  but  other 
times  it's  an  abysmal  failure. 


As  with  any  highly  charged  de¬ 
bate,  the  truth  lies  in  an  amalgam  of 
both  sides’  data  and  positions.  In  this 
case,  the  truth  boils  down  to  this: 
Know  what  you're  buying  and  why 
you’re  buying  it,  have  a  successful 
plan  for  using  it,  and  be  aware  that 
the  cycle  of  innovation  and  upgrade 
may  be  a  treadmill  that  you  can't  get 
off  of  without  a  lot  of  pain. 

Michael  Frank 
Network  designer, 

Boeing  Shared  Services  Group, 
El  Segundo,  Calif. 

AT  LEAST  in  the  way  they  were 
reported  in  the  article,  Met¬ 
calfe’s  arguments  don’t  address 
Carr’s  arguments.  In  fact,  they  seem 
to  reinforce  Carr’s  arguments.  Met¬ 
calfe  states  that  IT  spending  is  cur¬ 
rently  high  and  that  IT  is  seen  to  be  a 
high  priority.  But  this  doesn't  ad¬ 
dress  whether  such  spending  or  per¬ 
ception  is  advantageous.  In  fact,  it 
heightens  the  urgency  and  impor¬ 
tance  of  Carr’s  contention,  if  that 
contention  is  indeed  correct. 

Metcalfe  also  asks,  “Who  will 
provide  testbeds?"  This  is  like  ask¬ 


ing  me  to  be  a  guinea  pig  because 
someone  else  needs  the  results  of 
an  experimental  drug.  Again,  it 
legitimizes  Carr's  claim  that  one 
shouldn't  try  to  lead  with  IT. 

My  own  take  on  it  is  that,  as  is 
common  in  many  heated  argu¬ 
ments,  there  is  really  no  argument 
at  all.  The  answer  hinges  on  which 
IT  we  are  talking  about.  It  is  usually 
quite  clear  which  IT  is  strategic  and 
which  IT  is  infrastructural. 

Rajeev  Jain 

Consultant,  Ann  Arbor,  Mich., 
rajeev.jain@usa.net 

COMPUTERWORLD  welcomes 
comments  from  its  readers.  Letters 
will  be  edited  for  brevity  and  clarity. 
They  should  be  addressed  to  Jamie 
Eckle,  letters  editor,  Computerworld, 
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BUST  OBJECTS 
D  ROBUST  SQL 


A  RARE  SIGHT  IN 
DBMS  PRODUCTS 


For  your  next  generation  of  applications,  move 
to  the  next  generation  of  database  technology. 

Cache  is  the  post-relational  database  that  com¬ 
bines  high-performance  SQL  for  faster  queries  and 
an  advanced  object  database  for  rapidly  storing 
and  accessing  objects.  With  Cache,  no  mapping 
is  required  between  object  and  relational  views  of 
data.  That  means  huge  savings  in  both  development 
and  processing  time. 

Applications  built  on  Cache  are  massively  scala¬ 
ble  and  lightning-fast.  Plus,  they  require  minimal 
or  no  database  administration. 

More  than  just  a  database  system,  Cache  incor¬ 
porates  a  powerful  Web  application  development 


environment  that  dramatically  reduces  the  time  to 
build  and  modify  applications. 

The  reliability  of  Cache  is  proven  every  day  in 
“life-or-death”  applications  at  thousands  of  the  world’s 
largest  hospitals.  Cache  is  so  reliable,  it’s  the  leading 
database  in  healthcare  -  and  it  powers  enterprise  appli¬ 
cations  in  financial  services,  government  and  many 
other  sectors. 

We  are  InterSystems,  a  specialist  in  data  manage¬ 
ment  technology  for  twenty-five  years.  We  provide 
24x7  support  to  four  million  users  in  88  countries. 
Cache  is  available  for  Windows,  OpenVMS,  Linux  and 
major  UNIX  platforms  -  and  it  is  deployed  on  systems 
ranging  from  two  to  over  10,000  simultaneous  users. 


InterSystems,/ 

E  CACHE 

Make  Applications  Faster 

Free  White  Paper 

Read  or  request  a  copy  of  the  Baroudi/Bloor  white  paper  “The  Failure  of  Relational  Database, 

The  rise  of  Object  Technology'  and  the  Need  for  the  Hybrid  Database.”  at  www.InterSystems.com/cworld 

C  2004  ImcrSywenu  Corporation.  .Mi  rights  reserved  IntcrSislcm*  Cachi  is  a  registered  trademark  of  InterSistcm*  Corporation.  7  03 
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VOICE-OVER-IP  MONITORING  TOOLS 
HAVE  EVOLVED  TO  REMEDY  THE 
UNIQUE  PROBLEMS  OF  CONVERGED 
VOICE/DATA  TRAFFIC  ACROSS 
ENTERPRISE-SCALE  NETWORKS. 

BY  ROBERT  L.  SCHEIER 


VoIP  still  requires  special  tools 
and  skills  because  voice  traffic  is 
far  more  sensitive  than  data  to 
common  problems  such  as 
dropped  or  delayed  packets.  But 
as  tools  for  managing  VoIP  traffic 
have  evolved,  Lopez  and  other 
VoIP  managers  have  become 
increasingly  confident  that  they 
can  manage  even  large-scale  de¬ 
ployments  of  voice  communica¬ 
tions  systems  over  converged 
voice/data  networks. 

Looking  back  at  what  he  was 
capable  of  doing  with  the  manage¬ 
ment  tools  that  were  available 
when  he  first  deployed  VoIP,  Lopez 
says,  “Life  is  so  much  better.  We 
can  see  troubleshoot  our  own 
[problems] . . .  and  see  exactly 
what’s  happening.” 

Network  managers  say  the  place 
to  start  is  with  network  compo¬ 
nents  and  management  tools  that 
support  Ethernet  quality-of-service 
(QoS)  standards  for  prioritizing 
voice  traffic,  and  with  management 
software  that  can  do  real-time,  end- 
to-end  monitoring  of  voice  traffic 
across  a  LAN  or  WAN.  Administra¬ 
tors  should  also  do  upfront  evalua¬ 
tions  of  their  networks  to  ensure 
that  they  can  handle  VoIP  and 

Continued  on  page  24 


WHEN  KEVIN  LOPEZ 

began  sending  voice 
calls  over  his  IP  data 
network  using  a  new 
IP  telephony  system  two  years  ago, 
he  had  no  way  of  monitoring  voice 
traffic  to  maintain  the  quality  of 
calls.  “We  didn’t  have  any  monitor¬ 
ing  on  the  voice  side,  so  we  were 
totally  reliant  on  our  [data]  net¬ 
work  counterparts,”  he  says. 

Now,  using  Avaya  Inc.’s  Integrat¬ 
ed  Management  software,  he  can 
configure  a  softphone  —  an  applet 
that  lets  a  PC  function  as  a  tele¬ 
phone  —  place  a  call  between  any 
two  points  on  the  network  and 
hear  the  voice  quality  while  track¬ 
ing  network  metrics  on  screen.  “It’s 
almost  like  a  speedometer,”  says 
Lopez,  national  manager  of  tele¬ 
communications  at  Grant  Thorn¬ 
ton  Inc.,  a  global  accounting  and 
auditing  firm  in  Chicago  with 
about  3,500  users  on  voice-over-IP 
systems.  “[It]  will  show  you  in  red, 
yellow  and  green  where  the  call 
was  in  terms  of  lost  packets,  or  any 
sort  of  error  it  encountered.”  The 
tool  can  also  “roll  back”  the  speed¬ 
ometer  to  view  and  diagnose  net¬ 
work  conditions  at  the  precise  mo¬ 
ment  when  a  user  says  he  was  hav¬ 
ing  trouble. 
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Unleash  Linux! 


We  see  flexibility  as  a  key  to  growth.  And  the  key 
to  flexibility?  Open,  industry-standard  systems. 
That’s  why  more  businesses  are  choosing  HP  systems 
to  run  Linux.  Over  5,000  experts  are  helping  our 
customers  use  Linux  to  support  business-critical 
processes.  We’ve  also  partnered  with  companies 
like  BEA,  Oracle  and  SAP  to  ensure  your  entire 
business  can  stay  flexible.  The  result?  You’ll  be 
ready  for  the  changes  of  tomorrow. 
www.hp.com/info/linux 
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Continued  from  page  21 
learn  to  watch  for  subtle  problems  that 
don’t  interfere  with  data  applications 
but  wreak  havoc  with  voice  quality. 

Voice  traffic  isn’t  a  bandwidth  hog, 
but  on  a  converged  network  it  can  fall 
victim  to  unexpected,  short-lived  con¬ 
gestion  caused  by,  say,  a  user  initiating 
a  streaming  video  application.  One  key 
metric  to  track  is  propagation  delay.  A 
lag  of  only  50  milliseconds  can  create 
echo  in  a  call,  while  delays  greater 
than  250  milliseconds  can  cause  one 
speaker  to  talk  over  the  other. 

Jitter,  the  variation  in  arrival  times  of 
voice  packets  that  should  all  arrive  at 
the  same  moment,  is  another  problem. 
One  way  to  reduce  jitter  is  to  store  and 
hold  early-arriving  packets  until  their 
slower  counterparts  arrive.  However, 
making  such  “jitter  buffers”  too  large 
can  itself  increase  delays  in  the  proc¬ 
essing  of  the  voice  packets,  reducing 
voice  quality. 

Designers  of  VoIP  networks  need  to 
do  upfront  assessments  to  be  sure  their 
networks  can  handle  the  demands  of 
temperamental  VoIP  traffic.  They 
should  also  pay  close  attention  to  net¬ 
work  performance  metrics  that  barely 
mattered  in  the  more  familiar  world  of 
data  traffic.  But  to  do  that,  administra¬ 
tors  need  specialized  tools. 

Basic  Requirements 

The  first  requirement  for  any  network 
management  tool  is  that  it  must  sup¬ 
port  QoS.  Sean  McRae,  vice  president 
and  CIO  at  Prudential  Northwest 
Properties,  a  real  estate  firm  in  Port¬ 
land,  Ore.,  uses  Network  Supervisor 
monitoring  software  from  3Com  Corp. 
in  Marlboro,  Mass.  The  software  “al¬ 
lows  us  to  keep  an  eye  on  our  WAN 
traffic  between  all  of  our  servers  and 
routers”  to  ensure  that  voice  packets 
get  top  priority,  he  says. 

The  second  requirement  is  the  abili¬ 
ty  to  perform  real-time  traffic  monitor¬ 
ing  so  administrators  can  troubleshoot 
short-lived  problems  that  cripple  voice 
quality.  Another  common  and  useful 
feature  is  the  ability  to  see  the  condi¬ 
tion  of  the  network  at  the  point  in  time 
when  the  user  reported  a  problem. 

Network  managers  also  need  a  tool 
that  can  monitor  all  of  the  network 
components  along  the  call  path  that 
might  affect  voice  quality.  Lopez,  for 
example,  wants  to  see 
alerts  not  only  for  his  IP 
private  branch  ex¬ 
changes,  but  also  for 
switches  or  any  other 
component  that  is  fail¬ 
ing  or  overloaded. 

Sources  of  man¬ 


agement  tools  include  the  vendors  that 
make  network  components  such  as 
switches  and  routers,  as  well  as  the 
manufacturers  of  IP  telephony  sys¬ 
tems.  For  example,  Nortel  Networks 
Ltd.’s  Optivity  Policy  Services  and  Op- 
tivity  Network  Management  System 
provide  central  management  and  con¬ 
trol  of  QoS  across  a  network. 

Third-party  management  software 
vendors  also  focus  on  VoIP  manage¬ 
ment.  Concord  Communications  Inc.’s 
eHealth  Voice  Quality  Monitor  assess¬ 
es  network  readiness  and  monitors  on¬ 
going  voice  quality.  The  tools  aren’t 
cheap;  a  basic  eHealth  system  starts  at 
$6,000,  and  a  more  comprehensive 
package  that  manages  QoS  and  the 
end-to-end  network  infrastructure 
starts  at  about  $150,000. 

NetIQCorp.’s  Vivinet  Manager  Suite 
provides  proactive  network  and  sys¬ 
tem  monitoring  and  automatic  alert¬ 
ing.  It  provides  integrated  monitoring 
of  IP  telephony,  unified  messaging  and 
video  applications.  The  suite  also 
helps  network  administrators  deter¬ 
mine  if  voice  problems  are  being 
caused  at  the  hardware,  operating  sys¬ 
tem  or  application  level.  Pricing  varies 
by  customer  environment,  but  a  sys¬ 
tem  capable  of  managing  a  100-phone 
Cisco  CallManager  deployment  costs 
about  $6,000. 

Another  NetlQ^application,  the 
$5,000  Vivinet  Diagnostics,  finds  the 
source  of  voice  quality  problems,  iden¬ 
tifies  the  causes  and  prioritizes  them, 
combining  network  discovery,  synthet¬ 
ic  transactions  and  monitoring  of 
LANs,  WANs  and  network  devices. 

Because  VoIP  management  is  still  a 
relatively  immature  area,  management 
tools  supplied  by  IP  telephony  system 
vendors  such  as  Nortel,  Cisco  Systems 
Inc.  and  Avaya  work  best  with  their 
own  products,  says  Robert  Rosenberg, 
president  of  Insight  Research  Corp.  in 
Boonton,  N.J.  And  some  management 
features  may  not  work  with  gear  from 
other  vendors. 

That  can  be  a  problem  because  most 
customers  use  VoIP  technology  from  a 
number  of  vendors,  says  Darrell  Epps, 
a  technical  assistance  manager  at 
NextiraOne  LLC,  a  systems  integrator 
and  managed  service  provider  in  Hous¬ 
ton.  However,  he  says,  over  the  past  12 
to  18  months  several  independent  ven¬ 
dors  of  management  software  have 
made  progress  in  producing  soft¬ 
ware  that  can  manage  VoIP  com¬ 
ponents  from  multiple  vendors. 
They  include  NetIQand  Con¬ 
cord  as  well  as  Micromuse 
Inc.,  which  offers  a  system 
called  Netcool  for  VoIP. 
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Some  equipment  vendors  are  also 
teaming  up  with  third-party  vendors  to 
provide  management  tools  that  aren’t 
tied  to  a  single  vendor.  For  example, 
Nortel  includes  NetIQ]s  Vivinet  Man¬ 
agement  as  part  of  its  Enterprise  Net¬ 
work  and  Service  Management  capa¬ 
bilities.  And  the  Visual  UpTime  Select 
performance  management  application 
from  Visual  Networks  Operations  Inc. 
ships  with  Cisco’s  routers  and  can  also 
be  integrated  with  system  and  network 
management  tools  such  as  Hewlett- 
Packard  Co.’s  OpenView,  says  Naresh 
Kannan,  director  of  product  strategy  at 
Visual  Networks. 

And  many  VoIP  tool  vendors  are 
working  to  combine  VoIP  functions 
with  their  data  management  products, 
or  with  those  from  other  vendors,  in 
order  to  provide  a  single  view  of  both 
voice  and  data  traffic  on  the  converged 
network.  For  example,  Nortel  is  ship¬ 
ping  IP  phones  that  support  real-time 
monitoring  of  voice  calls  and  send 
alerts  of  problems  that  could  affect 
voice  quality  to  the  same  applications 
that  network  managers  use  to  monitor 
data  traffic.  This  reduces  the  number 
of  management  consoles  customers 
must  buy  and  monitor  —  and  makes  it 
easier  to  find  and  fix  problems.  McRae 
also  uses  his  management  software, 


Network  Supervisor,  to  monitor  both 
the  data  and  voice  side  of  his  network. 

Bruno  Battochio,  communications 
specialist  at  Falconbridge  Ltd.,  a 
Toronto-based  mining  company,  uses  a 
combination  of  Nortel’s  Optivity  man¬ 
agement  software  and  a  traditional 
packet  analyzer  to  monitor  the  perfor¬ 
mance  of  IP  phones  linked  to  a  Nortel 
Business  Communications  Manager 
system  in  an  underground  mine.  “We 
didn’t  mix  and  match  equipment”  from 
multiple  vendors,  Battochio  says, 
adding  that  he  wanted  to  avoid  situa¬ 
tions  he  has  faced  in  the  past  where 
different  vendors  blamed  one  another 
for  a  problem  instead  of  fixing  it. 

Looking  forward,  vendors  hope  to 
provide  “self-healing”  networks  with 
tools  that  not  only  proactively  find 
problems  but  also  fix  them  automati¬ 
cally.  By  2005,  Nortel  hopes  to  be  ship¬ 
ping  a  version  of  Optivity  that  can  au¬ 
tomatically  solve  voice  quality  prob¬ 
lems  by  resetting  a  network  port  or  re¬ 
defining  the  QoS  settings  implemented 
on  a  switch,  says  Clive  Foreman,  vice 
president  of  engineering  for  enterprise 
network  and  service  management  at 
Nortel  in  Brampton,  Ontario. 

John  Montgomery  wants  manage¬ 
ment  tools  that  can  automatically 
reroute  voice  packets  if  a  slowdown 
hits  part  of  the  network,  something 
that  he  says  is  now  “a  highly  manual 
process.”  Montgomery,  vice  president 
and  chief  technology  officer  at  Embar- 
cadero  Systems  Corp.  in  Alameda, 
Calif.,  is  about  one  quarter  of  the  way 
through  a  plan  to  move  1,000  users  to 
Cisco’s  IP  telephony  system.  Although 
each  upgrade  of  Cisco  Works  manage¬ 
ment  software  brings  more  features,  he 
says  proactive  troubleshooting  fea¬ 
tures  have  been  slow  to  materialize. 

Despite  some  limitations,  most  ob¬ 
servers  says  today’s  VoIP  management 
software  is  up  to  the  task  of  managing 
large-scale  VoIP  deployments  — 
although  it  can  cost  anywhere  from 
$25  to  hundreds  of  dollars  per  user  per 
year,  depending  on  the  number  of 
users  and  the  range  of  functions  re¬ 
quired,  says  Ronald  F.  Gruia,  an  analyst 
at  Frost  &  Sullivan  Ltd.  in  Toronto. 

“The  management  tools  we  have  to¬ 
day  are  designed  for  installations  of 
tens  of  thousands,  if  not  hundreds  of 
thousands,  of  users”  says  McRae.  But 
choosing  the  right  tool,  and  knowing 
how  to  use  it,  requires  an  understand¬ 
ing  of  the  finicky  new  world  of  VoIP. 

©  45708 


Scheier  is  a  Computerworld  contribut¬ 
ing  writer  in  Boylston,  Mass.  He  can  be 
reached  at  rscheier@charter.net. 
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Control  More  Computers  for  Less  Money,  in  Less  Space  and  in  Less  Time 
uiith  Tripp  Lite  KVM  Suiitches 

Tripp  Lite  KVM  Switches  offer  the  most  economical  and  convenient  solutions  available  for  controlling  up  to 
512  PCs  or  servers  with  a  single  keyboard/video/mouse  console.  Save  money,  space  and  time  by  eliminating 
unnecessary  consoles,  removing  cable  clutter  and  avoiding  the  need  to  move  between  multiple  consoles. 


16-Port  1U  Rackmount _ 

•  All-in-one  console  KVM  switch  includes  a  keyboard,  15”  LCD  screen, 
touch  pad  and  16-port  KVM  switch  in  an  easy-glide  1U  rack  drawer 

•  Built-in  on-screen  display  gives  you  control  over  all  ports 
•  Daisy-chain  capability  and  two-level  password  security 

•  2  models  available  (one  features  integrated 
console  KVM  switch  as  shown) 


8-Port  1U  Rackmount 

•  Slim  1U  cabinet  design  with  daisy-chain  capability 

•  On-screen  display  gives  you  control  over  all  ports 

4-Port  Desktop 


•  Compact  desktop  design  with  individual  port  selection  button 

•  Notebook  and  wireless-ready 

2-Port  Desktop 


•  Compact  desktop  design  with  individual  port  selection  button 

•  Notebook  and  wireless-ready 

•  Includes  2  cable  kits 

For  more  information  on  Tripp  Lite  KVM  suiitches, 
or  to  locate  a  reseller-partner, 

visit  Tripp  Lite's  website: 

http://www.tripplite.com 

Resellers:  For  special  demo  unit  pricing,  call  Matt  Mulac  at  773-869-1091 , 
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Vendor  Upgrades 
Event  Technology 

Network  Intelligence  Corp.  in 
Westwood,  Mass.,  has  upgraded 
its  security  event  management 
software  and  hardware.  The  com¬ 
pany’s  enVision  Version  2.003 
software  is  designed  to  let  users 
compare  security-related  data 
with  similar  data  captured  in  the 
past.  It  also  features  a  cus¬ 
tomized  alerting  feature  and  ex¬ 
panded  device  support.  Network 
Intelligence’s  new  50  Series 
event  management  appliances 
feature  the  latest  enVision  soft¬ 
ware  and  a  dedicated  object 
database.  Pricing  for  the  50  Se¬ 
ries  starts  at  about  $59,000  for 
midsize  companies  and  about 
$190,000  for  large  enterprises. 


Intranets.com 
Adds  Calendaring 

lntranets.com  Inc.  in  Woburn, 
Mass.,  has  added  functions  to  its 
Online  Collaboration  Suite,  which 
is  designed  to  allow  corporate 
users  to  manage  and  coordinate 
events  anywhere  in  the  world  us¬ 
ing  a  Web  browser.  The  company 
said  that  the  new  calendaring 
features  will  let  users  check  for 
scheduling  conflicts,  synchronize 
appointments  with  a  Palm-based 
handheld  or  Microsoft  Outlook 
and  notify  participants  of  meet¬ 
ings  via  e-mail.  They  are  available 
now  at  no  additional  charge  to 
lntranets.com  customers. 


NetScreen  Offers 
SSL  Meeting  App 

NetScreen  Technologies  Inc.  in 
Sunnyvale,  Calif.,  has  announced 
the  availability  of  its  new  Net- 
Screen  Secure  Meeting,  a  Secure 
Sockets  Layer-based  appliance 
for  securing  online  meetings  and 
application-sharing  sessions. 
NetScreen  said  that  the  appliance 
lets  companies  securely  provision 
online  meetings  and  collaborative 
sessions  with  up  to  250  users. 
The  appliances  support  policy- 
based  authentication,  authoriza¬ 
tion  and  central  management  of 
users  in  a  collaborative  session. 


ROBERT  L.  MITCHELL 

Almost  Real  Time 


There  are  dozens  of  ways  to  search  for 
flights  to  Florida,  and  I  tried  them  all.  I 
carefully  worked  each  of  the  three  big  Web 
travel  sites  at  the  same  time,  juggling  mul¬ 
tiple  browser  windows.  Orbitz,  Travelocity 
and  Expedia  each  offered  different  results.  I  tried  alter¬ 
native  dates  and  airports.  After  more  than  an  hour, 

I  emerged  from  my  office  and  called  in  my  wife  to 


confirm  the  final  choice, 
bragging  that  the  savings 
had  been  worth  the  time 
spent.  But  when  I  made 
that  last  mouse  click  to 
commit  the  transaction  to 
my  credit  card,  the  reserva¬ 
tion  didn’t  go  through. 

My  wife,  who  now  calls 
me  “Mr.  Comparison  Shop¬ 
per,”  thinks  I’m  not  playing 
with  a  full  deck.  But  I  sus¬ 
pect  that  the  true  problem 
was  that  I  wasn’t  playing  in 
real  time. 

The  airline  reservations  business  is 
probably  closer  to  real-time  comput¬ 
ing  than  any  other  industry  except  for 
financial  services.  But  the  database  in¬ 
teractions  among  business  partners 
required  to  provide  real-time  reserva¬ 
tions  data  shows  just  how  big  a  chal¬ 
lenge  real  time  presents. 

Until  the  moment  I  tried  to  book  my 
flight,  I  wasn’t  talking  to  the  vendor’s 
primary  reservations  database.  I  was 
accessing  a  secondary  database  de¬ 
signed  for  inquiries.  Using  such  data¬ 
bases  for  flight  searches  makes  a  lot  of 
sense,  since  the  IT  folks  don’t  want 
thousands  of  queries  bombarding  the 
systems  executing  transactions  that 
bring  in  real  revenue. 

Sabre  Holdings’  arrangement  is  typi¬ 
cal.  The  global  distribution  system 
(GDS)  vendor’s  high-speed,  fault-toler¬ 
ant  HP  NonStop  servers  consummate 
deals  in  a  highly  optimized  database. 

At  the  same  time,  MySQL  databases  — 
45  of  them  residing  on  an  Itanium- 
based  Linux  server  farm  —  serve  up 
lowest-fare  flight  data  in  response 


to  customer  inquiries. 

Unless  fare  price  and 
seat-availability  data  pre¬ 
sented  to  customers  is  up¬ 
dated  in  real  time,  users 
may  not  learn  that  a  fare  is 
unavailable  until  they  try 
to  complete  the  purchase. 
Sabre  has  addressed  part 
of  this  issue  by  delivering 
continuous,  live  updates 
from  the  NonStop  system 
to  its  MySQL  database 
server  farm. 

A  third-party  data  synchronization 
tool  from  San  Francisco-based 
GoldenGate  Software  provides  syn¬ 
chronous  updates  between  databases. 
That’s  one  reason  why  my  corporate 
travel  agent,  Suzette,  never  has  a  prob¬ 
lem  confirming  a  fare  using  her  direct 
connection  into  the  Sabre  system.  She 
says  employees  like  me  call  all  the 
time  saying  they’ve  gotten  a  better 
fare.  “I  say,  ‘That’s  great;  see  if  you  can 
complete  it.’  And  they  can’t,”  she  says. 

The  reason  they  can’t  may  have 
something  to  do  with  the  way  reserva¬ 
tion  systems  receive  updates  from  in¬ 
dividual  airlines.  For  example,  at 
Sabre,  secondary  databases  contain 
only  fares,  rules  and  schedules.  Prices 
are  calculated  in  the  primary  NonStop 
database,  and  for  real-time  seat  avail¬ 
ability,  the  reservation  system  must 
query  the  individual  airlines’  main¬ 
frame  databases. 

Even  the  pricing  information  isn’t  in 
real  time:  Sabre  and  other  GDS  ven¬ 
dors  receive  updates  five  times  each 
day  from  Airline  Tariff  Publishing  Co., 
an  industry  cooperative.  But  providing 
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real-time  seat  availability  data  is  the 
biggest  challenge. 

A  travel  Web  site  can  generate  100 
searches  per  second  that  sift  through 
1,000  flights  each.  The  volume  of  re¬ 
quests  needed  to  verify  seating  for  all 
of  those  would  overwhelm  the  airlines’ 
availability  databases.  To  get  around 
this  problem,  travel  Web  sites  cache 
data  and  display  hundreds  of  fares  that 
the  system  predicts  will  be  available. 

The  downside  is  that  customers  may 
receive  options  that  don’t  exist  — 
either  because  the  seating  is  unavail¬ 
able  or  pricing  data  has  changed  —  and 
won’t  know  it  until  they  try  to  make 
the  purchase.  The  alternative,  which 
Sabre  prefers,  is  to  confirm  availability 
in  real  time  but  show  fewer  options. 

The  airlines  don’t  like  Web  sites 
caching  availability  information,  but 
they  can’t  respond  to  the  potential  vol¬ 
ume  of  incoming  requests,  says  Alan 
Walker,  vice  president  at  Sabre  Labs. 
His  company  would  like  to  bring  a 
copy  of  each  airline’s  master  seat- 
inventory  database  in-house  and  re¬ 
ceive  real-time  updates  to  it.  In  this 
way,  it  could  compute  availability  and 
offer  a  larger  number  of  accurate  flight 
options  to  users.  But  in  a  round-the- 
clock  system  with  such  high  transac¬ 
tion  loads,  Walker  says  the  transition 
would  be  like  “changing  a  tire  at  100 
miles  per  hour.” 

However,  Walker  doubts  that  these 
issues  have  anything  to  do  with  why  I 
couldn’t  book  my  reservation.  The 
other  reason  why  Suzette  never  fails 
to  book  a  ticket  is  because,  unlike  me, 
she  can  hold  seats  before  they’re  pur¬ 
chased.  So  although  it’s  possible  that 
an  inaccuracy  in  my  fare  search  results 
was  to  blame,  it’s  more  likely  that  time 
spent  comparison  shopping  did  me  in. 
Most  likely.  Walker  says,  “your  seats 
were  sold  out  from  under  you.”  And 
for  some  strange  reason,  my  wife 
thinks  that’s  funny.  ©  46191 
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Every  night,  United  Parcel 
Service  Inc.  processes  an  av¬ 
erage  of  600,000  packages 
through  its  massive  World- 
port  hub  in  Louisville,  Ky. 

One  hundred  aircraft  fly  in 
and  out  of  the  4  million- 
square-foot  facility.  It’s  a  feat 
of  industrial  choreography  that  the 
company  couldn’t  accomplish  without 
advanced  IT  systems,  says  Jovita  Car¬ 
ranza,  vice  president  of  air  operations. 

Carranza,  who  started  her  career 
with  UPS  in  Los  Angeles  loading 
trucks,  says  it  would  be  cost-prohibi¬ 
tive  to  handle  that  package  volume 
manually.  Plus,  the  Atlanta-based 
company  has  to  process  all  of  the  pack¬ 
ages  slated  for  overnight  delivery  be¬ 
tween  11:30  p.m.  to  3:30  a.m.  —  a  goal  it 
couldn’t  meet  if  it  had  to  sort  them  all 
manually,  she  says. 

Moreover,  automation  has  helped 
UPS  increase  employee  retention  by 
reducing  the  manual  workload,  says  A1 
Rapp,  vice  president  of  human  re¬ 
sources  at  the  UPS  Airlines  unit. 

That’s  important  for  UPS,  Rapp  says, 
because  worker  turnover  threatened  to 
tap  out  the  labor  pool  in  Louisville. 
Brian  Clancy,  a  consultant  at  trans¬ 
portation  and  logistics  consulting  firm 
MergeGlobal  Inc.  in  Arlington,  Va., 
agrees.  He  says  that  by  cutting  the 
amount  of  manual  labor  involved,  UPS 
can  better  attract  and  retain  the  5,000 
workers  needed  to  staff  Worldport. 

Worldport’s  IT  and  automation  sys¬ 
tems  run  on  a  mind-boggling  array  of 
hardware,  including  almost  14,000 
computer  devices  (see  box,  next 
page).  These  systems,  which  include 
30TB  of  online  storage,  are  networked 
via  5,500  miles  of  fiber-optic  cable  and 
control  122  miles  of  conveyor  belts 
that  move  the  packages,  according  to 
Ted  Gallagher,  Worldport’s  systems 
manager. 

Managing  Hie  Machine’ 

UPS  invested  $100  million  in  software 
development  for  the  Worldport  appli¬ 
cations,  says  Gallagher,  who  refers  to 
the  combination  of  hardware  and  soft¬ 
ware  as  “The  Machine.” 

Though  UPS  used  some  outside 
consultants,  CIO  and  Senior  Vice  Pres¬ 
ident  Ken  Lacy  says  the  company  had 
no  choice  but  to  develop  the  infra¬ 
structure  in-house,  “since  it  was  not 
available  off  the  shelf.”  Besides,  in- 
house  development  has  made  it  easier 


a. 


Overhead  cameras  read  bar  codes  on  the  fly. 


Worldport’s  operations  center  monitors  conveyors. 


Automation  at  the  Worldport  hub  speeds 
up  package  sorting,  cuts  manual  labor  and 
helps  UPS  compete  with  rival  FedEx. 


A  UPS  employee  checks  a  bar-code  label. 


An  igloo-shaped  container  of  packages  is  pushed  across  the  rollerball  floor. 

flags'  H  ■  1 

rule 

ilVGo 

to  maintain  and  troubleshoot  the  sys¬ 
tems,  he  says. 

Gallagher  says  Worldport  runs  on  10 
major  applications  tied  together  by 
company-developed  middleware 
called  the  Common  Message  Environ¬ 
ment.  This  software  uses  a  proprietary 
messaging  protocol,  allowing  for  easy 
transfer  of  information  among  dis¬ 
parate  applications,  including  main¬ 
frame-based  legacy  systems  and 
newer  e-business  applications. 


While  The  Machine  manages  World- 
port,  UPS  maintains  an  IT  staff  of 
more  than  100  people  to  manage  it. 
That  management  starts  at  the  most 
basic  level  on  a  daily  basis,  with  what 
Greg  Echsner,  manager  of  the  World- 
port  technical  support  group  (TSG), 
calls  a  “pretrip”  inspection  of  critical 
systems  throughout  the  facility. 

About  two  hours  before  the  sorting 
process  begins,  John  Music  and  five 
other  technicians  from  the  Worldport 


service  desk  walk  through  sections  of 
the  building,  checking  key  compo¬ 
nents  such  as  the  computerized  scales 
that  weigh  igloo-shaped  containers 
filled  with  packages  to  be  loaded  on 
aircraft. 

Those  massive  scales,  located  at 
each  of  the  hub’s  44  aircraft  loading 
doors,  are  networked  to  a  system  de¬ 
veloped  by  UPS  called  the  Distributed 
Weight  and  Balance  System,  which  en¬ 
sures  that  containers  are  loaded  onto 
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This  aerial  view  shows  the  gigantic  size  and  complexity  of  Worldport. 


OPS  Wsrlipsrt: 

Louisville  International  Airport 


Physical  infrastructure: 

4  miilion-square-foot  building,  housing 
17,000  conveyor  systems  with  an  overall 
length  of  122  miles;  built  for  SI  billion 


e  Processes  just  under  1  million 
packages  a  day  in  two  shifts 
Can  sort  304,000  packages  per  hour 
Individual  packages  can  be  sorted  in 
as  little  as  eight  minutes  to  a 
maximum  of  43  minutes 


5,177  desktop  and  industrial  PCs 

and  terminals 

505  Intel  servers 

159  midrange  servers,  including 

Sun  10000s 

1,420  printers 

5,186  scanning  devices 

500  networking  components  (routers, 

switches  and  so  on)  communicating 

over  5,500  miles  of  gigabit-speed 

fiber-optic  cable 

0  30TB  of  online  storage  capacity 
Database  system  handles  59  million 
transactions  per  hour 


aircraft  in  an  order  that  promotes 
load  stability. 

The  service  technicians  also  pay 
particular  attention  to  the  status  of  the 
scan  guns  that  read  the  all-important 
bar  codes,  testing  one  out  of  every  five, 
Echsner  explains. 

The  scan  guns  account  for  the 
majority  of  hardware  problems  the 
TSG  handles  because  the  devices  are 
often  dropped  on  the  floor. 

As  the  TSG  teams  finish  their  work, 
hub  controllers  such  as  Terry  Rigdon 
get  settled  at  their  desks  in  the  opera¬ 
tions  control  center  high  above  the 
Worldport  floor.  In  front  of  Rigdon  are 
three  computer  screens  that  serve  as 
windows  into  what  Gallagher  calls  the 
brain  of  The  Machine:  the  Human- 
Machine  Interface  system. 

This  system  allows  Rigdon  to  ob¬ 
serve  and  manage  the  flow  of  packages 
throughout  the  building.  Rigdon  can 
monitor  key  applications  such  as  the 
control  of  the  programmable  logic 
controllers  (PLC),  which  direct  com¬ 
pressed-air  pucks,  or  bumpers,  to  push 
packages  from  belt  to  belt  or  to  chutes 
and  deliver  the  packages  to  workers 
for  loading  into  outbound  containers. 


The  PLCs  determine  where  to  route 
the  packages  based  on  bar-code  labels, 
which  are  read  either  by  scanners  or 
high-resolution  cameras,  Gallagher 
says.  Donna  Barrett,  a  UPS  spokes¬ 
woman,  says  93%  of  the  packages  han¬ 
dled  by  Worldport  use  these  labels, 
which  in  UPS  lingo  provide  package- 
level  detail  (PLD). 

Customer  Cooperation 

Getting  that  detailed  information  re¬ 
quires  customer  cooperation,  which 
Barrett  says  the  company  achieves  by 
explaining  the  benefits  to  large  ship¬ 
pers  and,  in  some  cases,  providing 
them  with  label  printers.  Small  ship¬ 
pers,  including  individuals,  can  create 
their  own  labels  on  the  UPS  Web  site 
and  print  them  on  laser  or  ink-jet 
printers. 

Project  leader  Mark  Dilk  says  that 
when  customers  create  a  PLD  label, 
they  also  automatically  feed  data  about 
their  packages  to  Worldport  over  the 
UPS  global  network.  This  helps  World- 
port  staffers  build  a  twice-daily  “sort 
plan,”  which  reconfigures  the  mam¬ 
moth  facility  and  its  17,000  conveyors 
to  match  the  expected  package  flow, 


Gallagher  says.  The  sort  plan  is  the  key 
to  management  of  the  company’s  next- 
day  air  shipments,  he  says. 

Worldport  has  to  handle  package 
flows  that  change  daily,  plus  seasonal 
variations  such  as  huge  volume  in¬ 
creases  at  Christmas.  To  do  that,  Gal¬ 
lagher  says,  loading  and  unloading  po¬ 
sitions  at  Worldport  and  the  miles  of 
conveyor  belts  in  between  must  be  re¬ 
configured  through  the  sort  plan, 
which  is  managed  by  an  application 
called  the  Flexible  Lineup  Editor 
(Flex). 

The  ‘Secret  Sauce* 

Flex  is  the  “hidden  secret  sauce”  of 
Worldport,  Gallagher  says,  because  it 
manages  the  building  configuration 
“so  all  the  dependent  applications 
know  where  the  packages  go.”  Flex 
executes  this  reconfiguration  twice  a 
day,  he  adds,  once  for  the  night  shift 
(for  next-day  packages)  and  once  for 
the  day  shift  (which  processes  about 
300,000  second-day  air  packages). 

Two  systems  (one  for  domestic 
packages  and  one  for  international) 
feed  package-tracking  data  to  the  UPS 
data  center  in  Mahwah,  N.J.  This  infor¬ 
mation  is  later  used  to  help  customers 
track  the  packages  over  the  UPS 
Web  site. 

Once  a  package  completes  its  jour¬ 
ney  across  the  122  miles  of  conveyor 
belts,  it’s  directed  to  a  destination 
chute  and  loaded  in  a  container,  ready 
to  be  rolled  onto  an  aircraft.  Through¬ 
out  the  process,  most  packages  are 
touched  only  twice  by  humans:  once 
for  unloading  and  once  for  loading, 
Gallagher  says. 

The  containers  are  then  pushed  onto 
the  automated  scales,  checked  by  the 
Distributed  Weight  and  Balance  Sys¬ 
tem  and  put  on  an  aircraft. 

As  the  last  container  is  loaded,  the 
hum  of  the  conveyor  belts  momentari¬ 
ly  ceases  and  Worldport  grows  almost 
silent.  But  not  for  long.  In  just  a  matter 
of  hours,  another  team  of  Worldport 
TSG  technicians  will  start  to  check  IT 
hardware  in  preparation  for  the  day 
shift,  and  Flex  will  start  to  build  a  new 
sort  plan  and  reconfigure  systems  for 
the  hub  that  rarely  rests.  ©  45962 
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UPS  spent  $100  million  to  internally  develop  50 
applications  for  Worldport.  Read  about  the  core 
systems  for  managing  the  hub:  QuickLink  45967 

Preemptive  Strikes:  The  UPS  Worldport  technical 
support  group  defends  the  system  from  worm  and  virus 
attacks  through  constant  monitoring  of  hacker  and 
security  newsgroups,  which  leads  to  an  early  and 
effective  defense: 

QuickLink  45966 
www.computerworid.com 


FEDEX  CORP.’S  main  hub  in 
Memphis  can  more  than  match 
the  UPS  Worldport  hub  in 
Louisville,  Ky.,  in  terms  of  pack¬ 
age  throughput,  thanks  to  its  auto¬ 
mated  systems,  according  to  Alex 
Vergos,  a  senior  technical  adviser  at 
the  company’s  services  division. 

Vergos  says  FedEx  could  move 
325,000  pieces  per  hour  through  its 
Memphis  “small  soil”  facility,  which 
primarily  handles  overnight  letters. 

He  adds  that  FedEx  can  also  sort 
125,000  small  packages  per  hour  us¬ 
ing  separate  automation  systems  and 
conveyors  in  the  same  3  million- 
square-foot  building. 

That  tops  the  UPS  hub  in  Louisville, 
which  can  move  304,000  packages 
per  hour  through  a  4  million-square- 
foot  building.  However,  UPS  moves  a 
higher  volume  of  large  packages 
through  Worldport,  such  as  automo¬ 
bile  tires  strapped  onto  wooden  pal¬ 
lets,  which  in  turn  are  placed  iri  metal 
transporters  for  sorting. 

Vergos  says  the  average  transit 
time  for  a  small  package  in  Memphis 
is  about  seven  minutes.  Ted  Galla¬ 
gher,  Worldport’s  systems  manager 
for  operations  planning  and  control, 
says  Worldport  could  move  a  package 
of  any  size  through  that  facility  in 
between  eight  and  43  minutes. 

UPS  and  FedEx  are  In  a  “technol¬ 
ogy  arms  race”  to  move  packages 
smarter  and  faster,  with  each  “light 
years”  ahead  of  competitors  such  as 
Belgium-based  DHL  international  Ltd. 
and  the  Emery  Forwarding  division 
of  Palo  Alto,  Calif. -based  CNF  Inc., 
says  Brian  Clancy,  a  consultant  at 
MergeGlobal,  a  transportation  con¬ 
sulting  firm. 

Clancy  declines  to  say  which  rival 
has  the  most  automated  hub.  But  he 
says  that  UPS  tops  FedEx  in  using  IT 
and  automation  to  reduce  manual 
workloads  in  Louisville. 

“The  number  of  man-hours  per 
package  is  less  in  Louisville  than 
in  Memphis,  which  on  that  basis 
makes  Worldport  the  best  hub,” 
Clancy  says. 

-BobBrewin 


Enterprise  Rent-A-Car  wanted  to  reduce  operational  costs. 
Xerox  found  the  key  to  success  was  helping  them  get  access  to 
2.4  million  vital  documents  a  month  over  their  intranet. 

There’s  a  new  way  to  look  at  it. 


Enterprise  Rent-A-Car  wanted  to  make  their  document  process  more 
efficient.  So  they  consulted  with  a  team  of  document  experts  from  Xerox. 
Working  together,  they  analyzed  the  document  process  across  thousands  of 
locations  worldwide,  and  initiated  systemic  improvements  in  key  aspects  of 
filing  and  retrieving  mission-critical  documents.  By  implementing  a  Xerox 
Global  Services  Imaging  and  Retrieval  solution,  2.4  million  critical  docu¬ 


ments  a  month  are  scanned  and  stored  into  an  electronic  repository, 
making  them  instantly  available  over  the  Enterprise  Intranet  whenever 
needed.  The  result:  Documents  are  managed  in  a  timely  manner. 
Redundancy  and  errors  are  cut  way  back,  and  security  is  maximized.  To  find 
out  how  Xerox  can  bring  this  kind  of  time  and  cost-saving  expertise  to  your 
business,  simply  call  your  Xerox  representative  or  visit  our  website  today. 


Learn  more:  xerox.com/learn  For  a  sales  rep:  1-800-ask-xerox  ext.  learn 
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Lewis  Joins  Cruise 
Company  as  CIO 

Doug  Lewis  has 
been  named 
senior  vice 
president  and 
corporate  CIO  at 
Carnival  Corp., 
the  world’s 
largest  cruise 
company.  In  the  newly  created 
position,  Lewis  will  work  with 
Carnival’s  12  operating  units  to 
develop  a  corporatewide  IT  strat¬ 
egy.  He  will  also  head  the  Miami- 
based  company’s  IT  CIO  Council, 
which  is  made  up  of  CIOs  from 
each  operating  unit.  Lewis  previ¬ 
ously  served  as  CIO  at  Six  Conti¬ 
nents  Hotels  Inc.,  AT&T/Lucent 
and  Pratt  &  Whitney. 


GeoLogistics  Picks 
Kirk  to  Lead  IT 

GeoLogistics  Corp.,  a  third-party 
logistics  company  in  Santa  Ana, 
Calif.,  announced  the  appoint¬ 
ment  of  Charles  Kirk  as  CIO.  Kirk 
was  previously  IT  head  at  C&S 
Wholesale  Grocers  Inc.,  a  Brattle- 
boro,  Vt.-based  grocery  whole¬ 
saler.  He  also  led  consumer  mar¬ 
keting  IT  initiatives  at  General 
Motors  Corp.  and  logistics  proj¬ 
ects  at  FedEx  Corp. 


Garvey  Is  New  IT 
Chief  at  Warnaco 

The  Warnaco  Group  Inc.,  a  New 
York-based  apparel  company,  has 
named  Michelle  Garvey  CIO.  Pre¬ 
viously,  she  served  as  CIO  at 
MemberWorks  Inc.,  a  partnership 
marketing  company,  and  held  IT 
positions  at  Brooks  Brothers, 
Ames  Department  Stores  Inc.  and 
Arthur  Andersen  LLP. 


Health  Care  Firm 
Taps  Probst  as  CIO 

Mark  Probst  was  appointed  vice 
president  of  IT  and  CIO  at  Inter- 
mountain  Health  Care  Inc.  in  Salt 
Lake  City.  Prior  to  joining  IHC, 
Probst  was  a  partner  at  a  con¬ 
sulting  firm  and  CIO  of  a  large 
third-party  administrator. 


BARBARA  GOMOLSKI 


It’s  Time  to 
Re-engineer  IT 


INFORMATION  TECHNOLOGY  PROFESSIONALS 
are  usually  the  best  in  the  organization  when  it 
comes  to  business  process  re-engineering.  Why 
is  it,  then,  that  the  IT  group  often  has  some  of 
the  most  “underengineered”  processes  in  the 
company?  It’s  true.  IT  is  great  at  looking  at  business 
processes  in  other  parts  of  the  organization  but  not  as 
comfortable  looking  at  how  its  own  work  gets  done. 


There  are  still  many 
“world-class”  IT  groups 
that  can  build  enterprise- 
scale  applications  but  lack 
a  standard  process  for 
problem  resolution  or  op¬ 
erational  change  manage¬ 
ment.  Increasingly,  IT  lead¬ 
ers  are  getting  interested  in 
process  improvement.  This 
is  partly  because  most 
companies  are  still  looking 
for  ways  to  reduce  IT  costs. 

If  you’re  like  many  IT 
managers,  you’ve  already 
consolidated  servers,  audit¬ 
ed  telecommunications 
bills  and  squeezed  your  hardware  and 
software  vendors  for  better  deals.  In¬ 
deed,  for  many  companies,  the  low- 
hanging  fruit  of  IT  cost  cutting  has  al¬ 
ready  been  harvested.  Further  reduc¬ 
tion  in  IT  costs  may  be  possible,  but  it 
will  likely  require  taking  a  close  look 
at  the  processes  of  the  IT  organization. 

Naturally,  increased  efficiency  isn’t 
the  only  motivator  for  sharpening  IT 
processes.  By  re-engineering  its  proc¬ 
esses,  the  IT  organization  can  also 
improve  the  quality  of  its  service. 

There  are  hundreds  of  processes  in 
most  IT  organizations.  It’s  overwhelm¬ 
ing  to  tackle  them  all  at  once.  In  fact, 
it’s  probably  feasible  to  look  at  only 
three  or  four  key  processes  in  the  next 
12  months  because  you  have  to  keep 
IT  running  while  you  do  this. 

When  looking  at  process  maturity, 
many  IT  organizations  start  with  the 


basics,  like  operational 
change  management.  Es¬ 
sentially,  these  are  process¬ 
es  that  define  how  changes 
to  the  IT  environment  are 
received,  recorded,  ana¬ 
lyzed,  approved,  priori¬ 
tized  and  executed. 

Other  key  areas  that 
often  get  attention  at  the 
early  phase  of  process 
improvement  are  IT  finan¬ 
cial  management,  configu¬ 
ration  and  capacity  man¬ 
agement,  and  the  manage¬ 
ment  of  IT  assets,  procure¬ 
ment  and  vendors.  In  addi¬ 
tion,  IT  organizations  often  consider 
processes  around  the  management  of 
service  levels,  application  life  cycles 
and  quality  assurance. 

The  best  way  to  begin  is  to  focus  on 
the  process  “pain  points”  in  your  orga¬ 
nization.  For  instance,  if  your  staff  is 
still  responding  to  end-user  requests 
in  an  ad  hoc  fashion,  you’ll  want  to 
look  at  your  request  management 
processes.  Or  if  you  find  that  basic  in¬ 
formation  about  IT  capabilities  isn’t 
getting  out  to  your  internal  customers, 
you’ll  want  to  focus  on  your  communi¬ 
cations  processes.  Maybe  IT  planning 
is  weak,  or  budget  estimates  fail  to  hit 
the  mark. 

Whatever  the  issue,  begin  by  isolat¬ 
ing  the  processes  around  the  problem. 
(Sometimes  there  will  be  no  docu¬ 
mented  processes,  and  IT  leaders  will 
have  to  interview  IT  staffers  to  find 
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out  how  issues  are  handled.) 

You’ll  find  that  there  are  several  ex¬ 
amples  of  well-defined  IT  processes 
already  in  existence.  In  the  application 
development  arena,  the  Software  Engi¬ 
neering  Institute’s  Capability  Maturity 
Model  provides  a  framework  for  proc¬ 
ess  improvement. 

The  IT  Infrastructure  Library,  origi¬ 
nally  developed  by  the  U.K.  govern¬ 
ment,  has  become  a  popular  frame¬ 
work  for  key  IT  processes  such  as 
change,  problem,  configuration  and  re¬ 
lease  management.  Because  of  its  Eu¬ 
ropean  roots,  ITIL  has  been  more 
widely  adopted  in  the  European  Union 
than  it  has  in  the  U.S.,  but  its  populari¬ 
ty  on  this  side  of  the  pond  appears  to 
be  growing.  The  following  are  some 
other  IT  process  frameworks  worth 
considering  [QuickLink  44933]: 

■  Control  Objectives  for  Information  and 
Related  Technology  (CobfT).  A  framework 
to  ensure  that  IT  resources  are  aligned 
with  business  objectives.  CobiT  de¬ 
fines  34  IT  processes  and  links  them 
to  more  than  300  tasks. 

■  Six  Sigma.  A  methodology  in  which 
processes  are  continuously  refined 
until  their  outcomes  fall  within  an 
acceptable  level  of  defects.  Because  of 
its  roots  in  manufacturing,  there  is  on¬ 
going  debate  as  to  how  applicable  Six 
Sigma  is  to  IT. 

■  ISO  9000.  A  standard  that  primari¬ 
ly  focuses  on  achieving  predictability 
in  business  processes. 

Regardless  of  whether  an  IT  organi¬ 
zation  uses  a  predefined  methodology 
for  improving  its  processes,  it’s  a  good 
idea  for  every  IT  group  to  periodically 
review  how  the  company  does  things. 
This  is  particularly  true  as  IT  organi¬ 
zations  continue  to  look  for  ways  to  be 
more  efficient  and  service-oriented. 
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VELOCITY2 

PARTNER 


EMC  CLARiiON®  CHANGES  THE  WAY  YOU  THINK  ABOUT  STORAGE.  Your  information  and  applications 
will  be  there  when  you  get  back.  But  some  of  the  hassles  of  managing  them  will  be  gone  forever.  The  nev 
CLARiiON  CX  series  makes  your  online  information  safer  and  gives  you  simple,  powerful  management 
software.  Network  flexibility  for  SAN  or  NAS.  Scalable  solutions  starting  below  $10,000.  To  learn  more, 
visitwww.EMC.com/backup.  Or  call  1-866-464-7381. 

Find  an  authorized  EMC  Velocity2  Partner  at  www.EMC.com/velocity. 
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Security  is  the  hist  thing  on  tins  Chief  Security  Officers  mind.  I  hat  s  bcctUise  its  tin  first  tiling  mi  ours 
Armed  with  real-time  information  and  response  capabilities  from  VeriSign's  Intelligence  and  Control  .Services 
tor  Network  Security,  he  can  now  take  tile  initiative.  Play  offense,  rather  rhun  defense.  locus  on  the  kinds  of 
projects  that  will  keep  his  Fortune  500  publishing  company  competitive,  like  establishing  a  global  VPN.  And 
reducing  operating  costs.  Now  he  can  think  freely.  At  least  until  an  editor  c.  Is,  wanting  to  stop  the  presses. 
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>■  To  learn  more  about  VeriSign’s  new  Intelligence  and  Control  Services  for  Network  Security,  visit  wWW.verisign.com 
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A  Dose  of  Reality 

Ml  'nL  warts-and-all  experience 

r  like  testing  your  disaster 
recovery  plan  in  the  real 

Listen  to  Mom 

PMSfc  1  Dear  old  Mom  said  to  expect  the 

|S:  LAVnB  worst.  That’s  good  advice  for 
fHyis'  Jgj  managing  disaster  recovery  efforts 

WL  '  V  I  with  your  outsourcers,  says 
columnist  Mark  Hall.  Page  41 

Managers  describe  their  plans  for 
protecting  the  business  from  disasters 
and  avoiding  classic  blunders.  ^ 


Are  you  overspending  on  disaster 

RECOVERY?  I  know  it  seems  like  a 
ridiculous  question.  How  could  you 
be?  Newspaper  headlines  throw 
more  risks  —  and  regulators  throw 
more  requirements  —  in 
your  face  almost  every  day.  Besides,  this 
is  a  special  report  on  disaster  recovery, 
so  of  course  it’s  full  of  suggestions  of 
Things  You  Ought  to  Do,  which  usually 
require  spending  more  money,  not  less.  Even  if 
your  disaster  recovery  situation  is  pretty  good, 
you  still  have  to  worry  about  your  suppliers  and 
outsourcing  contractors. 

But  it  is  possible  to  overspend  on  disaster 


EDITOR’S  NOTE 

I  recovery,  especially  if  you  listen  to  every  vendor 
I  saying  you  must  do  x ,  y  and  z  to  comply  with 
I  the  Sarbanes-Oxley  Act.  (None  of  those  sales 
I  weasels  have  actually  read  the  law  or  its  regula- 
I  tions,  you  can  bet  on  that.) 

Tim  DeLisle,  managing  principal  at 
Corigelan  LLC,  a  disaster  recovery  con¬ 
sultancy  in  Chicago,  says  the  way  to  avoid 
overspending  is  to  establish  three  tiers  of 
disaster  recovery  based  on  business  re- 
|  quirements.  It  begins  with  the  CIO  asking  busi- 
I  ness  managers  which  few  applications  are  truly 
|  critical  and  require  recovery  within  24  hours  to 
I  keep  the  business  afloat.  You  don’t  have  to  mir- 
I  ror  everything!  The  second  tier  of  applications, 


which  require  recovery  in  48  to  72  hours,  may 
need  only  inexpensive  tape  backup,  while  the 
third  tier  may  need  nothing  at  all,  DeLisle  says. 

All  that  the  business  executives  and  regula¬ 
tors  really  require  is  that  you  take  prudent  steps 
for  business  continuity.  You  don’t  have  to  bank¬ 
rupt  the  company.  ©  45982 


Mitch  Betts  is  Computerworld’s  Features  editor. 
Contact  him  at  mitch_betts@computerworld.com. 
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reparing  for  disaster  means  "figuring  out  what  your  deficiencies  are,”  says  JOE  TORRES  of  Miami-Dade  County 


These  tips  from  users  with  well-worn 
recovery  plans  will  help  keep  your 
business  running  during  the  most 
common  disasters.  By  Lucas  Mearian 


ONE  KEY  TO  KEEPING  your 
business  on  its  feet  in  a 
disaster  is  anticipating 
the  sometimes  cascading 
effects  a  catastrophe  can 
have  on  your  IT  operation. 
Take  Miami-Dade  County,  for  exam¬ 
ple.  When  a  hurricane  hit  southern 
Florida  in  1992,  the  county’s  data  cen¬ 
ter  lost  power.  Diesel  generators  had 
overheated  when  well  water  ran  out 
because  high  winds  had  broken  water 
mains  and  lowered  the  water  table.  IT 
managers  later  had  air-cooled  genera¬ 
tors  installed. 

One  of  the  problems  with  disaster 
recovery,  experts  say,  is  that  although 
most  companies  have  plans  for  com¬ 
mon  scenarios  —  weather-related 
emergencies,  headquarters  lockouts 
and  massive  power  outages  —  those 
plans  aren’t  regularly  tested  or  com¬ 
municated  to  end  users.  In  fact,  in  a 
recent  survey  of  283  Computerworld 
readers,  81%  of  the  respondents  said 
their  organizations  have  disaster  re¬ 
covery  plans.  But  71%  of  the  respon¬ 
dents  at  companies  with  plans  said  the 
plans  hadn’t  been  exercised  in  2003. 

It  takes  forethought  to  avoid  a  busi¬ 
ness  shutdown  during  a  disaster.  Ex¬ 
perts  and  users  agree  that  there  are 
steps  you  can  take  to  increase  your 
chances  of  coming  through  the  most 
common  disasters  unscathed. 


Weather-Related  Emergencies 


“If  you  look  at  why  facilities  fail  [dur¬ 
ing  weather  disasters],  it’s  all  pretty 
predictable.  They  call  it  an  act  of  God, 
and  I  call  it  an  act  of  stupidity,”  says 
Ken  Brill,  executive  director  of  The 
Uptime  Institute  in  Santa  Fe,  N.M. 

Hurricanes  threaten  Miami-Dade 


County’s  data  center  every  year  from 
June  through  November,  yet  IT  man¬ 
agers  still  struggle  with  getting  every¬ 
one  to  understand  the  importance  of 
disaster  planning.  “The  challenge  we 
always  have  is  to  make  sure  the  staff  is 
completely  involved  and  we  have  par¬ 
ticipation,”  says  Ruben  Lopez,  director 
of  the  enterprise  technology  services 
department  for  the  county. 

Miami-Dade  County  gives  itself  a  56- 
hour  window  to  test  its  disaster  recov¬ 
ery  plan  each  year  by  cutting  over  to 
its  alternate  data  center  and  restoring 
data.  It  uses  the  time  to  find  deficien¬ 
cies  and  later  corrects  them. 

“Business  continuity  and  disaster  re¬ 
covery  preparedness  is  all  about  figur¬ 
ing  out  what  your  deficiencies  are  and 
how  you’re  going  to  fix  them.  It’s  not 
about  how  to  get  an  A+  on  paper,”  says 
Joe  Torres,  disaster  recovery  coordina¬ 
tor  for  Miami-Dade  County.  He  points 
out  that  it’s  not  the  people  he’s  testing 
during  a  disaster  recovery  exercise  but 
the  plan  —  “because  you  can’t  depend 
on  the  people  being  available.” 

“You’re  going  to  give  them  a  book 
with  instructions,  and  they  need  to  be 
able  to  follow  that,”  Torres  says.  One 
step  Miami-Dade  has  taken  in  that  di¬ 
rection  is  to  consider  call-tree  software 
that  could  help  employees  contact  key 
managers  in  an  emergency. 

Walter  Hatten,  senior  vice  president 
and  technical  services  manager  at 
Hancock  Bank  in  Gulfport,  Miss.,  has 
focused  on  consolidating  his  server 
farm  and  creating  a  redundant  commu¬ 
nications  network  for  an  area  of  the 
country  that  gets  hit  or  brushed  by  a 
hurricane  every  three  and  a  half  years. 
The  100-branch  bank,  with  headquar¬ 
ters  on  the  Gulf  of  Mexico,  is  consoli- 
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AT&T  BUSINESS  CONTINUITY  SERVICES.  Can  your  network  stay  strong  under  pressure?  Can  it  laugh  in 
the  face  of  disaster,  man-made  or  otherwise?  AT&T's  business  continuity  teams  design,  implement  and 
manage  secure,  self-healing  and  redundant  end-to-end  business  solutions  that  encompass  networks, 
storage,  computers  and  applications.  With  our  intelligent  data  pathways,  proven  recovery  plans  and 
unsurpassed  security,  your  business  will  enjoy  nonstop  operations  -  no  matter  what  Mother  Nature 
decides  to  throw  at  it.  CAN  YOUR  NETWORK  DO  THIS? 


AT&T 

The  world's  networking  company™ 


For  a  network  that  can,  call  1-888-889-0234 

att.com/networking 
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Businesses  today  need  to 
achieve  a  state  of  business 
continuity,  where  critical 
business  processes, 
applications,  data,  work 
centers  and  networks  are 
always  available.  Leveraging 
a  heritage  of  reliability  and 
recognized  continuity 
expertise,  AT&T  can  help 
identify  a  level  of  operational 
readiness,  business 
resumption  and  recovery 
capabilities  for  your  business. 
We  provide  you  with: 


AT&T  Business  Continuity  Solutions: 
protecting  your  business  assets 

before  you  have  to 


AT&T  can  mitigate  the  risk  within  your  enterprise  infrastructure  by  ensuring 
continuous  access  to  your  business  processes  and  applications.  The  AT&T 
business  continuity  portfolio  offers  options  for  security,  availability  and  recovery 
across  the  network,  storage  and  server  infrastructure  and  applications  layer. 
They  include: 

•  High  Availability  Networking  Services 

•  Managed  Storage  Services 

•  Enterprise  Recovery  Services 


•  Business  Continuity 
professionals  to  examine 
your  operations,  identify 
critical  processes  and 
services  and  recommend 
solutions. 

•  The  design,  deployment  and 
management  of  business 
continuity  solutions  to  meet 
your  business  application 
and  process  infrastructure 
requirements. 

•  Assured  business  continuity 
for  mission-critical 
applications  and  operations. 

•  24x7x365  performance 
management  and  monitoring 
backed  by  aggressive  Service 
Level  Agreements  (SLAs). 


•  Enterprise  Hosting  Services 

•  Professional  Networking  Expertise 

Business  Continuity  is  our  core  competency  applied  directly  to  the  unique 
demands  of  your  enterprise.  We  provide  you  with  the  continuity  services 
which  help  to  balance  risk  and  investment,  meeting  your  strategic  and 
operational  needs. 


«  Performance  Dependency  ► 

WHAT  THE  INDUSTRY  IS  SAYING: 


The  ability  to  comply  with 
industry  and  government 
standards  for  information 
access  and  protection. 


"AT&T  offers  the  industry's  most  comprehensive  and  proven  array  of 
networking-related  business  continuity  services  to  help  businesses  protect 
invaluable  information  assets,  supported  by  one  of  the  industry's  best 
portals,”  —  Zeus  Kerravala,  Vice  President,  Enterprise  Computing  and 


Methods  to  mitigate  the  Networking  —  The  Yankee  Group,  May  2003 

financial  and  operational 
impacts  of  business 
disruption. 


For  more  information,  contact  your  AT&T 
Representative,  or  visit  www.att.com/networking. 
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dating  500  servers  onto  a  Linux-based 
mainframe  to  reduce  recovery  time  in 
a  disaster. 

“Just  the  sheer  magnitude  of  rebuild¬ 
ing  500  servers  puts  us  at  risk  for  not 
being  able  to  do  it  quickly  enough,” 
says  Hatten,  who  chose  Linux  for  its 
open  standard  and  scalability.  He 
says  the  mainframe  will  offer  greater 
speed  for  recovery  of  data,  reducing 
the  amount  of  time  it  would  take  to 
restore  data  from  days  to  hours. 


Headquarters  Lockouts 

Maria  Herrera  is  chief  technology  offi¬ 
cer  at  Patton  Boggs  LLP,  a  Washington- 
based  law  firm  with  400  attorneys 
specializing  in  international  trade  law. 
Because  of  the  firm’s  proximity  to  the 
U.S.  Capitol  building,  one  constant 
concern  is  a  building  lockout  brought 
on  by  terrorist  threats,  she  says. 

Herrera  has  set  up  duplicate  operat¬ 
ing  environments  in  several  remote  of¬ 
fices  and  has  contracted  with  two  dis- 


Survey  Snapshots 

Does  your  organization  have 
a  disaster  recovery  plan? 


BASE:  Online  survey  of  283  IT  professionals 

Was  your  company’s  disaster 
recovery  plan  exercis  I  in  2003? 


“  /u. 

Don’t 

know 

BASE:  Online  survey  of  227  IT  professionals  at 
organizations  that  have  a  disaster  recovery  plan 


aster  recovery  vendors:  SunGard  Data 
Systems  Inc.  in  Wayne,  Pa.,  for  server 
recovery  and  workstation  services,  and 
AmeriVault  Corp.  in  Waltham,  Mass., 
for  data  backup. 

In  January,  AmeriVault  installed  its 
CentralControl  interface  on  desktops 
and  an  agent  on  each  of  Patton  Boggs’ 
servers.  After  completing  an  initial  full 
backup  of  all  data,  AmeriVault  now 
performs  daily  incremental  backups  of 
deltas,  or  changes,  to  disaster  recovery 
centers  in  Waltham  and  Philadelphia. 

In  an  emergency,  data  restores  can 
be  performed  remotely,  even  from 
home,  by  administrators  using  a  point- 
and-click  function  on  a  Web  portal 
provided  by  AmeriVault,  or  data  can 
be  shipped  on  tape  for  large  restores. 

“Every  month  or  couple  of  months, 
we  access  several  documents  and 
download  them  from  AmeriVault  to 
test  the  system,”  says  Herrera.  During 
full  testing,  she  spends  16  hours  recov¬ 
ering  full  data  sets.  “We’re  able  to  re¬ 
store  everything  within  the  firm  in 
about  10  hours,”  she  says. 

Herrera  also  suggests  involving  all 
IT  personnel  in  the  disaster  recovery 
testing  process,  because  in  an  emer¬ 
gency,  you  never  know  who  might  be 
available  to  help.  She  has  trained  em¬ 
ployees  in  all  four  satellite  offices 
around  the  country  on  disaster  recov¬ 
ery  procedures. 

SunGard  also  has  several  facilities 
where  IT  personnel  and  lawyers  can 
meet  to  continue  work  in  the  event  of  a 
headquarters  lockout,  Herrera  says. 

Officials  at  Mizuho  Capital  Markets 
Corp.,  a  subsidiary  of  the  world’s  sec¬ 
ond-largest  financial  services  firm, 
Mizuho  Financial  Group  Inc.  in  Tokyo, 
say  that  some  of  the  most  effective  dis¬ 
aster  recovery  tools  are  the  simplest. 

For  example,  when  a  protest  kept 
employees  from  entering  the  firm’s 
Times  Square  headquarters  late  last 
year,  IT  managers  passed  out  laminat¬ 
ed  business  cards  with  a  directory  of 
managers’  home  phone  numbers. 

Doug  Lilly,  a  senior  telecommunica¬ 
tions  technologist  at  the  Delaware 
Department  of  Technology  and  Infor- 


Tips  for  Coping  With  Disasters 


■  Choose  vendors  that  are  proactive 
and  don’t  require  prodding  to  upgrade 
or  test  your  disaster  recovery  plan. 

■  Don’t  test  people;  test  your  disaster 
recovery  plan.  People  come  and  go. 
Make  the  plan  easy  to  follow  and  use. 

■  After  a  disaster,  don’t  count  on 
employees  being  willing  to  fly  to 
alternate  work  sites. 

■  Distribute  key  disaster  recovery 
personnel  across  many  geographic 
locations. 

■  Turn  disaster  recovery  data  centers 
into  active  work  sites. 

■  Disaster  recovery  plans  are  living, 
breathing  things.  Keep  them  up  to 


date  and  make  sure  employees  are 
well  versed  in  them. 

■  Seek  vendors  with  plenty  of 
longevity  and  geographically  dis¬ 
persed  offices  for  disaster  recovery. 

■  Make  sure  portals  to  your  outsourc¬ 
ing  vendor  are  dedicated  or  have 
enough  bandwidth  to  handle  multiple 
companies  seeking  fast  restores. 

■  Make  sure  that  not  just  your  vendor 
but  you  understand  how  to  back  up 
and  restore  systems. 

■  Verify  that  backup  tapes  can 
restore  data. 

■  Train  and  involve  all  IT  personnel  in 
the  disaster  recovery  process. 


mation,  says  his  agency  has  three  data 
centers  that  support  about  20,000  state 
employees.  The  department  uses  EMC 
Corp.’s  Symmetrix  Remote  Data  Facili¬ 
ty  to  replicate  data  among  the  data 
centers.  It  also  uses  backup  software 
from  Oceanport,  N.J.-based  Comm- 
Vault  Systems  Inc.  as  a  central  manage¬ 
ment  tool. 

“If  this  site  were  bombed  . . .  we’d 
have  servers  running  to  replace  them, 
but  we’d  still  have  to  restore  data  from 
tapes,”  Lilly  says.  “Comm Vault’s  soft¬ 
ware  transfers  between  60GB  and  65GB 
of  data  per  hour.  It  would  be  a  few 
hours  before  we  got  people  up  online.” 

Lilly’s  IT  team  also  keeps  a  copy  of 
disaster  recovery  procedures  at  home. 
“Team  leaders  notify  everyone,  and  we 
carry  cell  phones  and  BlackBerries 
that  are  on  redundant  networks,”  he 
says.  “It’s  a  pretty  unified  messaging 
platform . . .  that  ties  data,  voice,  fax 
and  video  into  one  application.  They 
can  get  hold  of  us  anytime,  anywhere.” 

Massive  Power  Outages 

Edward  Koplin,  an  engineer  at  Jack 
Dale  Associates  PC,  an  engineering 
firm  in  Baltimore,  says  a  lack  of  disas¬ 
ter  testing  is  the  No.  1  cause  of  data 
center  failures  during  a  blackout. 
Koplin  suggests  that  companies  test 
their  diesel  generators  often  and  at  full 
load  for  as  long  as  they’re  expected  to 
be  in  use  during  a  blackout. 

The  Uptime  Institute’s  Brill  adds 
to  that  advice:  Always  prepare  for  a 
blackout  with  at  least  two  more  gener¬ 
ators  than  needed,  and  test  them  by  lit¬ 
erally  pulling  the  plug.  “I  would  test  it 
for  as  long  as  I  expected  it  to  work  un¬ 
der  load.  I’d  do  that  at  least  every  two 
or  three  years.  And  I  would  run  it  in 
the  summer,”  Brill  says. 

Jim  Rittas,  a  security  administrator 


responsible  for  networking  at  Mizuho, 
says  the  company  can  now  perform  full 
data  restores  after  blackouts  or  other 
disasters  in  an  hour  instead  of  two 
days  because  it  now  mirrors  its  data  to 
a  New  Jersey  office  that’s  also  an  active 
work  site.  “The  other  thing  we  did  was 
diversify  our  Internet  connections. 
Internet  connections  now  flow  in  and 
out  of  New  York  and  New  Jersey, 
where  we  only  had  one  in  New  York 
before,”  Rittas  says. 

Needham,  Mass.-based  research  firm 
TowerGroup  recommends  turning 
parts  of  disaster  recovery  or  business 
continuity  data  centers  into  profit  cen¬ 
ters  by  going  with  an  active/active  op¬ 
erations  model.  Traditionally,  compa¬ 
nies  have  set  up  an  active  primary  data 
center  and  unmanned  backup  site.  An 
active/active  model  eliminates  the 
need  for  IT  staffers  to  relocate  in  an 
disaster  because  they’re  permanently 
stationed  at  the  disaster  recovery  site, 
which  is  also  used  to  run  active  busi¬ 
ness  applications. 

Integrating  disaster  recovery  IT 
assets  and  personnel  into  operations 
budgets  across  geographically  dis¬ 
persed  data  centers  will  also  help  blur 
the  line  between  disaster  recovery  and 
operations  spending. 

It’s  best  to  have  a  complete  copy 
of  your  data  in  an  alternate  site  at  all 
times,  “not  just  some  of  it,”  says  Wayne 
Schletter,  associate  director  of  global 
technology  at  Mizuho  Capital  Markets. 
“You  don’t  want  to  be  piecing  things 
together  after  something  happens.  You 
just  want  to  be  ready  to  go.”  ©  45444 

LESSONS  FROM  THE  BLACKOUT 

Even  where  recovery  efforts  went  swimmingly,  experts 
and  IT  executives  found  lessons  to  learn  from  the 
Northeast's  blackout  of  2003: 
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Disaster  recovery  is  an  un¬ 
pleasant  task.  And  that  makes 
it  a  low-priority  project  in 
almost  all  companies,  says 
Scott  Lundstrom,  an  analyst 
at  AMR  Research  Inc. 

“There  are  no  users  screaming  over 
business  continuity,”  he  says.  “So  given 
the  firefighting  nature  of  most  IT  orga¬ 
nizations,  [disaster  recovery]  never 
gets  the  resources  it  deserves.” 

Because  disaster  recovery  takes 
a  back  seat  to  other  IT  projects,  mis¬ 
takes  are  bound  to  happen.  We  asked 
IT  managers  and  other  experts  what’s 
most  likely  to  be  forgotten  or  over¬ 
looked  in  disaster  recovery  planning. 
Here  are  the  five  classics. 

MISTAKE  1: 

Failing  to  do  your  homework. 

IT  groups  often 
neglect  to  ask  users 
and  line-of-business 
executives  which 
applications  they 
need  most.  This 
leads  to  faulty  as¬ 
sumptions  about  disaster  recovery 
priorities.  In  particular,  IT  tends  to 
assume  that  heavy-duty  enterprise  ap¬ 
plications  should  be  restored  first. 

In  reality,  the  most  needed  applica¬ 
tions  may  be  much  more  basic  —  e-mail 
and  scheduling  tools  such  as  Microsoft 
Outlook,  for  example.  How  do  you  find 
out?  Ask  the  users.  “The  business  itself 
needs  a  plan  in  case  operations  are  dis¬ 
rupted,”  says  Elbert  Lane,  a  lead  soft¬ 
ware  developer  at  San  Francisco-based 
retailer  Gap  Inc.  and  a  20-year  veteran 
of  disaster  planning  at  several  compa¬ 
nies.  “They’ll  need  procedures  for  do¬ 
ing  paperwork,  etc.,  so  the  question  is, 
How  would  they  recover?  That’s  not 
just  an  IT  issue,  but  a  business  [issue].” 

THE  LESSON:  IT  constantly  hears  the 
term  mission-critical  used  in  reference 
to  CRM  and  ERP  software.  But  to  find 
out  which  applications  the  users  really 
want  restored  first,  simply  ask  them. 

MISTAKE  2: 

Thinking  it’s  purely  an  IT  issue. 

In  a  crisis,  the  per¬ 
formance  of  the  IT 
staff  may  be  the 
least  of  a  company’s 
worries.  “A  common 
assumption  is  that 
disaster  recovery 
and  business  continuity  are  synony¬ 
mous,”  says  Don  O’Connor,  CIO  at 
Southern  California  Water  Co.,  a  utility 
based  in  San  Dimas.  “They’re  not.” 

Even  underprepared  IT  organiza¬ 
tions  have  done  some  thinking  about 


Here  are  the  five  most  common  errors 
that  companies  make  when  preparing  for 
disaster.  By  Steve  Ulfelder 


what  to  do  when  disaster  strikes.  But 
can  the  same  be  said  of  other  groups? 
“In  my  experience,  IT  can  respond  rel¬ 
atively  quickly,”  O’Connor  says.  “The 
part  that’s  missing  is  the  users.” 

THE  LESSON:  Company  officers  need 
to  understand  that  rebooting  systems 
and  recovering  data  is  just  one  part  of 
the  problem.  Disaster  recovery  plans 
need  to  include  line-of-business  man¬ 
agers  and  end  users  who,  in  a  crisis, 
will  run  the  business  in  the  midst  of  ad¬ 
versity.  “Too  often,  continuity  is  some¬ 
thing  we  task  IT  with,”  Lundstrom 
says.  “It’s  really  a  business  issue.” 


MISTAKE  3: 

Fighting  the  last  war. 

If,  as  the  saying 
goes,  generals  are 
always  preparing  to 
fight  the  last  war, 
too  many  enterpris¬ 
es  spend  their  disas¬ 
ter  recovery  bud¬ 
gets  and  energy  preparing  for  the 
most  recent  catastrophic  event.  While 
understandable,  this  is  self-defeating; 
disasters  are,  by  their  nature,  well-nigh 
impossible  to  predict. 

Recent  history  offers  a  compelling 
example.  The  Sept.  11, 2001,  terrorist  at¬ 
tacks  on  the  World  Trade  Center  devas¬ 
tated  many  New  York-based  financial 
services  firms.  Many  wished  they’d  had 
nearby  backup  facilities,  and  they  pro¬ 
ceeded  to  build  such  facilities  at  great 
expense  across  the  river  in  Jersey  City, 
N.J.  But  Manhattan’s  next  major  busi¬ 
ness-continuity  crisis  —  the  August 
2003  blackout  —  took  out  electricity  in 
Jersey  City  as  well. 

THE  LESSON:  While  it’s  sensible  to 
consider  certain  broad  crisis  categories 
(terrorist  or  hacker  attacks,  earthquakes, 


Sweat  the 
Small  Stuff 

When  a  crisis  hits,  IT  staffers  seeking  to 
maintain  or  restore  operations  are  often 
tripped  up  by  the  most  basic  items.  Disaster 
planning  analysts  and  experts  say  you  need 
to  think  about  things  like  the  following: 

Who  has  keys  or  access  cards 
for  the  building?  How  do  you  get  in  if  the 
electrical  grid  is  shut  down?  What  local 
public-safety  officials  (police,  fire  or  town 
officials)  can  you  turn  to  for  help? 

In  a  crisis,  IT  staffers 
may  need  to  contact  corporate  officers 
whose  names  they  don’t  even  know.  An 
emergency  “telephone  tree”  that  includes 
mobile  numbers  is  a  must. 

At  home,  we’ve  all  felt  stupid  when 
a  blackout  hit  and  our  flashlight  batteries 
were  dead.  The  same  goes  for  the  workplace 
-  after  all,  backup  generators  fail,  too. 

Security  is  good,  but  in  an 
emergency,  even  low-level  staffers  may  need 
extraordinary  systems  access.  Organizations 
need  to  put  a  crisis-only  override  in  place. 


fires  and  so  on),  don’t  think  you  can  an¬ 
ticipate  future  events.  Plan  not  for  spe¬ 
cific  crises,  but  rather  for  their  effects. 
The  Gap  had  servers  located  in  the 
World  Trade  Center  on  Sept.  11,  Lane 
says,  but  “we  had  set  them  up  to  fail¬ 
over  to  backups  located  in  the  South.” 


MISTAKE  4: 
Overlooking  the  people. 


This  is  another  les¬ 
son  from  Sept.  11: 
Top-notch  backup 
equipment  helps 
only  if  somebody  is 
able  to  use  it.  “Some 
businesses  had  re¬ 
covery  data  centers 


in  Lower  Manhattan,”  says  Carl 
Claunch,  an  analyst  at  Gartner  Inc. 
However,  he  says,  immediately  follow¬ 
ing  the  collapse  of  the  World  Trade 
Center  towers,  “police  wouldn’t  let 
people  in.  The  equipment  was  fine,  but 
it  just  sat  there  unused.”  This  can  hap¬ 
pen  if  a  building  is  quarantined,  an  ele¬ 
vator  stuck  or  a  major  road  closed. 

The  other  part  of  this  gotcha  is  the 
expertise  of  those  who  finally  do  access 
backup  equipment.  Too  many  compa¬ 
nies  —  especially  those  that  fudge  their 
recovery  exercises  —  count  on  IT  hero¬ 
ics  to  pull  them  out  of  a  crisis.  Howev¬ 
er,  as  the  Gap’s  Lane  says,  “you  never 
know  if  key  personnel  will  be  back.” 

THE  LESSON:  This  is  where  strong 
documentation  comes  in.  “We  fashion 
our  document  so  anyone  in  the  busi¬ 
ness  should  be  able  to  restart  an  appli¬ 
cation,”  Lane  says.  “You  should  be  able 
to  have  somebody  from  the  mail  room 
start  everything  up.” 


MISTAKE  5:  Conducting 
phony-baloney  practice  drills. 

“Sure,  companies  do 
testing.  But  because 
full  tests  are  so  re- 
source-intensive, 
they’re  scheduled  in 
advance,”  Claunch 
says.  The  result:  IT 
workers,  driven  by  the  natural  desire 
to  ace  a  test,  cheat.  “They  prepare. 
They  collect  tools,  review  procedures,” 
he  says.  “Then,  when  a  real  disaster 
hits,  blooey.” 

This  is  a  sticky  problem  for  IT  orga¬ 
nizations  stretched  thin  even  before  dis¬ 
aster  planning  is  factored  into  their 
workloads.  Lane  says  practices  at  the 
Gap  are  planned  in  advance.  “We  are  a 
retailer;  we  need  to  support  our  stores” 
around  the  clock,  he  says. 

THE  LESSON:  There  is  no  easy  answer 
here.  Everybody  concedes  that  surprise 
disaster  tests  are  more  effective,  but 
performing  one  in  a  round-the-clock, 
e-business  environment  is  a  massive 
undertaking.  Claunch  suggests  surprise 
tests  of  one  IT  subgroup  at  a  time,  leav¬ 
ing  the  rest  of  the  staff  to  run  opera¬ 
tions.  And  some  businesses  use  audi¬ 
tors  to  make  sure  IT  workers  don’t  lean 
on  prepared  information.  ©  45392 


Ulfelder  is  a  Computerworld  contributing 
writer  in  Southboro,  Mass.  Contact  him  at 
sulfelder@charter.net. 


AN  OUNCE  OF  PREVENTION 


A  California  law  that  requires  hospitals  in  the  state  to 
be  earthquake-proof  gives  companies  an  opportunity 
to  revamp  and  modernize  their  IT  infrastructures: 
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Business-to-business  depen¬ 
dencies  create  the  opportuni¬ 
ty  for  great  benefits.  But  if  a 
disaster  strikes  any  company 
in  the  supply  chain,  the  risks 
to  all  are  equally  great. 

At  Ryder  System  Inc.,  customers 
routinely  vet  their  supply  chain  part¬ 
ners  to  ensure  that  they  meet  mini¬ 
mum  standards  for  robustness  and  se¬ 
curity.  “If  they  can’t  make  the  cut,  we 
won’t  do  business  with  them,”  says 
Chuck  Lounsbury,  senior  vice  presi¬ 
dent  of  sales  and  marketing  at  the 
Miami-based  transportation,  logistics 
and  supply  chain  management  services 
company.  “We  don’t  want  to  jeopardize 
the  capabilities  of  all  the  other  compa¬ 
nies  involved.” 

“It  is  a  matter  of  working  together,” 
adds  Richard  Arns,  executive  director 
of  the  Chicago  Research  &  Planning 
Group ,  which  spun  off  a  post-Sept.  11 
effort  called  the  Security  Board.  A  key 
lesson  from  the  terrorist  attacks,  he 
says,  is  that  organizations  should  en¬ 
large  their  circle  of  preparedness. 

But  that  message  may  not  be  getting 
through.  An  American  Management 
Association  survey  conducted  last  year 


showed  a  sharp  increase  in  the  number 
of  companies  with  crisis  plans,  drills  or 
simulations.  Yet  only  about  a  third  of 
those  companies  reported  having  on¬ 
going  and  backup  emergency  commu¬ 
nications  plans  with  their  suppliers. 

To  make  their  operations  truly  disas¬ 
ter-resistant,  IT  managers  should  de¬ 
termine  if  business  partners  are  ready 
to  handle  a  disaster,  experts  say.  Then 
they  must  work  closely  with  those  sup¬ 
pliers  to  achieve  parity  in  their  disaster 
recovery  efforts  and  get  their  recovery 
times  in  sync.  Here  are  some  more  tips: 

TIP:  Tighten  SLA  Language 

A  good  starting  point,  says  Roberta  J. 
Witty,  an  analyst  at  Gartner  Inc.,  is  the 
language  of  the  service-level  agree¬ 
ment.  SLAs  are  normally  applied  to  IT 
providers  but  also  offer  a  framework 
for  talking  about  critical  IT  support 
from  partners.  But  that’s  only  the  be¬ 
ginning.  Witty  says  IT  managers 
should  conduct  an  internal  inventory 
assessment  to  determine  which  points 
outside  the  enterprise  are  critical  to  a 
company’s  functions.  They  should 
then  extend  the  process  to  suppliers. 

“Have  a  conversation  with  them 


Getin^nc 
With  Suppliers 

A  disaster  for  your  trading  partners  could 
mean  a  disaster  for  you.  By  Alan  R.  Earls 


Survey  Snapshot 

Does  your  company  require  business 
partners  to  have  an  active  disaster 
recovery  plan? 


Yes  No 

35%  38% 


Don’t  know 
27% 
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o 
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about  what  the  risks  are  within  their 
own  supply  chain,”  she  says.  “You  are 
outsourcing  functions;  maybe  they  are, 
too.”  It  may  be  worthwhile  to  line  up 
backup  suppliers  for  your  outsourced 
services  so  you  have  more  redundancy 
—  and  encourage  partners  to  do  the 
same,  says  Witty.  In  any  case,  at  each 
step  in  the  supply  chain  —  including 
with  your  internal  operations,  your  out¬ 
sourcers,  your  suppliers  and  their  out¬ 
sourcers  and  suppliers  —  there  needs 
to  be  a  credible  recovery  plan,  she  says, 
“or  their  disaster  will  become  yours.” 

And  nothing  beats  testing.  When¬ 
ever  possible,  it’s  a  good  idea  to  in¬ 
clude  partners  in  your  own  tests  and 
vice  versa,  Witty  says. 

TIP:  Test  ERP  Connections 

Jim  Grogan,  vice  president  of  alliances 
at  SunGard  Data  Systems  Inc.  in 
Wayne,  Pa.,  says  he’s  seeing  more 
clients  embrace  the  ideal  of  the  real¬ 
time  enterprise.  And  enterprise  appli¬ 
cations,  such  as  ERP  software,  that 
support  that  vision  almost  invariably 
have  links  outside  the  organization. 

“We  encourage  [clients]  to  do  an 
information-availability  study  of  their 
trading  partners  and  suppliers,  even  if 
they  have  to  foot  the  bill,”  he  says. 

Most  worrisome  to  Grogan  is  the 
fact  that  many  organizations  have  en¬ 
trusted  key  business  processes  to  soft¬ 
ware  —  to  the  point  that  unaided  hu¬ 
mans  would  have  difficulty  handling 
those  functions  on  their  own. 

“Even  a  few  years  ago,  you  could 
count  on  someone  being  able  to  get 
on  the  phone  and  fix  things,”  he  says. 
Likewise,  Grogan  notes,  phone  com¬ 
munication  used  to  be  planners’  first 
priority.  But  not  anymore.  “Now, 


everyone  tells  us  that  the  first  thing 
they  need  to  get  back  in  business  with 
partners  is  e-mail,”  he  says. 

At  a  granular  level,  Grogan  says  Sun¬ 
Gard  always  looks  for  potential  single 
points  of  failure  within  a  supply  chain, 
such  as  a  server,  switch  or  cable  upon 
which  many  operations  depend.  Com¬ 
panies  also  need  to  coordinate  their  re¬ 
covery  plans  because  for  many  appli¬ 
cations,  particularly  ERP,  “systems  are 
connected  in  real  time  with  others  that 
may  have  different  recovery  times  or 
different  recovery  points,  which  can 
complicate  efforts  to  get  back  to  busi¬ 
ness,”  he  says. 

TIP:  Secure  Partner 
Communications 

It’s  also  important  to  look  at  the  secu¬ 
rity  of  business  partner  communica¬ 
tions  because  glitches  in  that  area 
could  precipitate  a  disaster.  Nick  Brig- 
man,  vice  president  of  strategy  at  Red- 
Siren  Inc.,  an  IT  security  management 
firm  in  Pittsburgh,  says  it’s  important 
to  understand  whether  you’re  connect¬ 
ed  to  partners  via  a  private  network,  a 
virtual  private  network  or  the  Internet. 

One  of  the  best  ways  to  enhance  the 
security  of  that  communication  is  to 
assign  “least-privileged”  accounts  to 
partners  that  define  the  nature  and 
even  the  volume  of  expected  traffic, 
says  Brigman.  This  not  only  eliminates 
potentially  spurious  communications, 
but  it  also  provides  a  basis  for  detect¬ 
ing  abnormal  activities,  he  says. 

Finally,  John  Jackson,  vice  president 
of  IBM  Business  Continuity  and  Re¬ 
covery  Services,  says  business-to-busi¬ 
ness  dependencies  make  it  critical  for 
companies  to  “get  together  and  do  a 
business  impact  analysis  to  determine 
how  their  individual  recovery  times 
could  be  made  to  mesh.” 

“In  some  cases,  companies  find  that 
they  are  doing  far  more  than  their  part¬ 
ners,  and  their  partners  either  have  to 
catch  up,  or  they  need  to  consider 
spending  less,  since  they  won’t  really 
get  much  benefit,”  he  says. 

Communication  infrastructure  is  the 
key,  Jackson  adds.  Partners,  especially 
smaller  ones,  may  not  have  the  knowl¬ 
edge  needed  to  ensure  robust  and  re¬ 
silient  performance.  And  they  may  just 
need  help  to  get  there.  ©  45533 


Earls  is  a  freelance  writer  in  Franklin,  Mass. 
Contact  him  at  alan@alanearls.com. 


KNOWING  WHOM  TO  TRUST 


Don  Houser,  a  security  architect  at  Nationwide  Mutual 
Insurance,  developed  a  technology  that  lets  business 
partners  set  standards  for  working  together: 
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A  Dose 
Of  Reality 

Nothing  gives  you  a  warts-and-all 
experience  like  testing  your  disaster 
recovery  plan  in  the  real  world. 

By  Robert  L  Scheier 


IF  YOU  WANT  TO  REALLY  TEST  your 
disaster  recovery  plan,  you  have 
to  get  out  from  behind  your  desk 
and  step  out  into  the  real  world. 
Because  in  the  real  world,  the 
backup  site  lost  your  tapes,  your  emer¬ 
gency  phone  numbers  are  out  of  date, 
and  you  forgot  to  order  Chinese  food 
for  the  folks  working  around  the  clock 
at  your  off-site  data  center. 

“Unless  it’s  tested,  it’s  just  a  docu¬ 
ment,”  says  Joyce  Repsher,  product 
manager  for  business  continuity  ser¬ 
vices  at  Electronic  Data  Systems  Corp., 
an  IT  outsourcing  and  services  pro¬ 
vider  in  Plano,  Texas. 

How  often  should  you  test?  Several 
experts  suggest  real-world,  testing  of 
an  organization’s  most  critical  systems 
at  least  once  a  year.  In  the  wake  of 
Sept.  11  and  with  new  regulations  hold¬ 
ing  executives  responsible  for  keeping 
corporate  data  secure,  organizations 
are  doing  more  testing  than  they  did  10 
years  ago,  says  Repsher.  An  exclusive 
Computerworld  online  survey  of  224  IT 
managers  supports  that  assertion,  indi¬ 


cating  that  71%  had  tested  their  disas¬ 
ter  recovery  plans  in  the  past  year  (for 
more  survey  results,  see  page  35). 

Desktop  disaster  recovery  testing 
involves  going  through  a  checklist  of 
who  should  do  what  in  case  of  a  disas¬ 
ter.  Such  walk-throughs  are  a  neces¬ 
sary  first  step  and  can  help  you  catch 
changes  such  as  a  new  version  of  an 


Survey  Snapshot 

When  was  your  company’s  disaster 
recovery  plan  last  tested? 

Less  than  a  month  ago 

One  to  three  months  ago 

Four  to  six  months  ago 

More  than  six  months  ago 

One  year  ago 

More  than  one  year  ago 

Don’t  know 

Base:  Online  survey  of  224  IT  professionals  at 
organizations  that  have  a  disaster  recovery  plan 
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application  that  will  trigger  other 
changes  in  the  plan.  They  can  also  iden¬ 
tify  the  most  important  applications, 
says  Repsher,  “before  moving  to  the  ex¬ 
pense  of  a  more  realistic  recovery  test.” 

Companies  do  desktop  tests  at  dif¬ 
ferent  intervals.  Fluor  Fernald  Inc., 
which  is  handling  the  cleanup  of  a  gov¬ 
ernment  nuclear  site  in  Fernald,  Ohio, 
does  both  desktop  and  physical  tests  of 
its  disaster  response  plans  every  three 
years  “or  anytime  there’s  a  significant 
change  in  our  hardware  configuration,” 
says  Jan  Arnett,  manager  of  systems 
and  administration  at  the  division  of 
engineering  giant  Fluor  Corp. 

What’s  Critical? 

Determining  which  systems  need  a 
live  test  is  also  critical.  Fluor  Fernald 
schedules  live  tests  on  only  about  25  of 
its  most  critical  applications  and  then 
tests  only  one  server  running  a  repre¬ 
sentative  sample  of  these  applications, 
says  Arnett.  “We  feel  if  we  can  bring 
one  server  up,  we  can  bring  10  servers 
up,”  he  says,  especially  since  the  com¬ 
pany  uses  standard  Intel-based  servers 
and  networking  equipment. 

The  most  common  form  of  live 
testing  is  parallel  testing,  says  Todd 
Pekats,  national  director  of  storage  al¬ 
liances  at  IT  services  provider  Compu- 
Com  Systems  Inc.  in  Dallas.  Parallel 
testing  recovers  a  separate  set  of  criti¬ 
cal  applications  at  a  disaster  recovery 
site  without  interrupting  the  flow  of 
regular  business.  Costly  and  rarely 
done,  the  most  realistic  test  is  a  full 
switch  of  critical  systems  during  work¬ 
ing  hours  to  standby  equipment,  which 
Pekats  says  is  appropriate  only  for  the 
most  critical  applications. 

Businesses  that  are  growing  or 
changing  quickly  should  test  their  dis¬ 
aster  recovery  plans  more  often,  says 
A1  Decker,  executive  director  of  securi¬ 
ty  and  privacy  services  at  EDS.  He  cites 
one  firm  that  has  grown  eightfold 
since  1999,  when  its  disaster  plan 
called  for  the  recovery  of  critical  sys¬ 
tems  in  24  hours.  Today,  just  mounting 
the  tapes  required  for  those  systems 
would  take  four  to  10  days,  he  says. 

Deciding  how  realistic  to  make  the 
test  “is  a  balance  between  the  amount 
of  protection  you  want”  and  the  cost  in 
money,  staff  time  and  disruption,  says 
Repsher.  As  an  organization’s  disaster 
recovery  program  matures,  the  tests  of 
its  recovery  plans  should  become  more 
challenging,  adds  Dan  Bailey,  senior 
manager  at  risk  consulting  firm  Protiv- 
iti  Inc.  in  Dallas.  While  the  more  real¬ 
istic  exercises  provide  more  lessons 
about  what  needs  improvement,  he 
says,  an  organization  just  starting  out 


Testing  Tip: 
Ditch  the  Script 

A  disaster  drill  isn’t  much  good  if 
everyone  knows  what’s  coming. 

But  too  many  organizations  script 
disaster  tests  weeks  ahead  of  time, 
ship  special  backup  files  to  an  off¬ 
site  recovery  center  and  even  make 
hotel  reservations  for  the  recovery 
staff,  says  John  Jackson,  vice  presi¬ 
dent  of  business  resilience  and  conti¬ 
nuity  services  at  IBM  in  Chicago. 

That  eliminates  messy  but  all-too- 
likely  problems  such  as  losing  back¬ 
up  tapes  in  transit  or  discovering  that 
a  convention  has  booked  all  the  hotel 
rooms  in  town.  He  advises  telling  the 
recovery  staff,  “We  just  had  a  disas¬ 
ter.  ...  You  can’t  take  anything  out  of 
the  building. ...  You  have  to  rely  on 
the  disaster  recovery  plan  and  what’s 
in  the  off-site  recovery  center." 

That  makes  the  test  more  “excit¬ 
ing,”  he  acknowledges,  but  it  also 
makes  it  a  lot  more  useful. 

-  Robert  L.  Scheier 


with  a  rudimentary  plan  probably  can’t 
handle  a  very  challenging  drill. 

Never  assume  that  everything  will 
go  as  planned.  That  includes  anything 
from  having  enough  food  or  desks  at  a 
recovery  site  to  having  up-to-date  con¬ 
tact  numbers.  Communications  prob¬ 
lems  are  common,  but  they’re  easily 
prevented  by  having  every  staff  mem¬ 
ber  place  a  test  call  to  everyone  on 
their  contact  list,  says  Kevin  Cheno- 
weth,  a  disaster  recovery  administrator 
at  Vanderbilt  University  Medical  Cen¬ 
ter  in  Nashville. 

Also,  never  assume  that  the  data  on 
your  backup  tapes  is  current  or  that 
your  recovery  hardware  can  handle 
your  production  databases.  Arnett 
found  subtle  differences  in  the  drivers 
and  network  configuration  cards  on  his 
replacement  servers  that  forced  him  to 
load  an  older  version  of  his  Oracle 
database  software  to  recover  his  data. 

Chenoweth  or  his  staffers  review 
each  test  with  the  affected  business 


units  and  develop  specific  plans  (with 
timelines)  for  fixing  problems. 

Finally,  Chenoweth  says,  thank 
everyone  for  their  help,  especially  if  the 
test  kept  them  away  from  home.  “If 
you’ve  got  a  good  relationship,  they’re 
more  likely  to  be  responsive”  to  the 
firm’s  disaster  recovery  needs,  he  says. 
O  45395 


Scheier  is  a  Computerworld  contribut¬ 
ing  writer  in  Boylston,  Mass.  He  can 
be  reached  at  rscheier@charter.net. 
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Restoring  Data  Tapes 
After  the  Coffee  Spill 

As  your  store’s  night  manager  is  driv¬ 
ing  home  with  the  backup  tapes,  he  has 
to  slam  on  the  brakes.  Hot  coffee  spills 
onto  the  tapes,  turning  them  into  a 
wet,  wrinkled  mess.  Can  you  still  re¬ 
cover  the  data?  The  folks  at  Exabyte 
Corp.  say  that  their  VXA  drives  can 
read  VXA-formatted  tapes  that  have 
been  subjected  to  boiling  water,  coffee, 
ice  or  volcanic  ash. 

The  trick  is  that  Exabyte’s  VXA  drives 
read  the  data  as  tiny  packets  on  the 
magnetic  tape  instead  of  using  the  con¬ 
ventional  method  of  reading  the  skinny 
tracks  that  run  along  the  length  of  the 
tape  from  beginning  to  end  [QuickLink 
40422].  The  VXA  drives  collect  the  ad¬ 
dressable  packets  and  reassemble  them 
with  an  error-checking  procedure  —  it’s 
similar  to  the  way  the  packet-switched 
Internet  works,  says  Kiernan  Maloney, 
an  Exabyte  general  manager  in  Boul¬ 
der,  Colo.  So  if  the  drive  misreads  a 
packet  —  perhaps  because  of  a  wrinkle 
or  a  spot  of  latte  —  it  goes  back  to  look 
for  the  missing  packet,  Maloney  says. 

Of  course,  only  a  backup  tape  gener¬ 
ated  by  a  VXA  drive  can  be  read  by  a 
VXA  drive. 


fixing  systems.  But  the  success  of 
those  efforts  created  credibility  prob¬ 
lems  for  disaster  recovery  specialists 
and  led  to  complacency  among  senior 
executives,  Bailey  says. 

Chief  financial  officers  who  OK’d 
$20  million  to  upgrade  systems  for  Y2k 
—  only  to  have  nothing  happen  —  may 
wonder  whether  that  was  money  well 
spent,  says  Tim  DeLisle,  managing 
principal  at  Corigelan  LLC,  a  disaster 
recovery  consultancy  in  Chicago.  If  IT 
asks  for  another  $30  million  to  upgrade 
disaster  recovery  capabilities,  those 
executives  are  going  to  be  skeptical,  so 
“you  need  to  build  a  business  case  for 
risk  management,”  DeLisle  says. 

The  other  post-Y2k  problem  is  that 
some  companies  figure  they  addressed 
all  their  disaster  recovery  issues  in  the 
Y2k  plan  that’s  sitting  on  the  shelf.  But 
many  of  their  systems  and  operations 
have  changed  since  1999,  so  those  plans 
are  virtually  worthless  now  unless 
they’ve  been  updated,  DeLisle  says. 


Three  Tips 

From:  Dorian  Cougias,  CEO  of  Network 
Frontiers  LLC  in  San  Francisco  and  author 
of  The  Backup  Book:  Disaster  Recovery 
From  Desktop  to  Data  Center  (Schaser- 
Vartan  Books,  2003). 

TIP  NO.  1:  Figure  out  how  to  recover 
from  “stupid-user  tricks,”  such  as  the 
user  who  accidentally  drags  an  empty 


file  directory  on  top  of  a  very  important 
file  directory  and  wipes  it  out,  or  the 
janitor  who  disregards  the  “Don’t  touch 
this  switch”  sign.  Ask  your  help  desk 
staffers  to  list  the  problems  they’ve 
dealt  with  in  the  past  12  months. 

TIP  NO.  2:  Have  a  disaster  recovery  plan 
for  your  e-mail  system,  the  most-used 
system  on  the  network.  Consider  a 
product  like  the  Emergency  Messaging 
System  from  MessageOne  Inc.  in 
Austin. 

TIP  NO.  3:  Make  sure  each  employee’s 
daily,  weekly  or  monthly  work  proce¬ 
dures  include  disaster  recovery  prac¬ 
tices,  just  like  a  sailor’s  duties  include 
checking  the  boat’s  rigging  and  pumps 
before  every  excursion. 


Patent  Watch 

■  A  data  storage  system  that  provides 
real-time  data  backup  when  a  hazard 
sensor  detects  an  imminent  disaster. 
The  system  alters  the  backup  process 
to  minimize  the  amount  of  lost  data. 

—  U.S.  Patent  No.  6,684,306,  issued  Jan. 
27, 2004.  Inventors:  Teruo  Nagasawa, 
Takahisa  Kimura  and  Takeshi  Koide,  for 
Hitachi  Ltd.  in  Tokyo. 

■  A  targeted  early-warning  system  for 
disasters.  Local  residents  are  warned 
of  a  fast-moving  disaster  via  a  code 
and  brief  text  message  sent  to  the 
caller  ID  screen  of  their  telephones. 

—  U.S.  Patent  No.  6,594,345,  issued  July 
15, 2003.  Inventor:  R.  Keith  Vinson,  for 
BellSouth  Corp.  ©  45976 


ONLINE  CHECKLIST 

The  Federal  Emergency  Management  Agency  has  a 
basic  checklist  for  business  recovery  from  disasters 

on  its  Web  site:  www.fema.gov/ofm/bc 


Billion-Dollar  Weather  Disasters 

From  1980  to  2003,  states  in  the  South  had  more  billion-dollar  weather  disasters  -  such  as  hurricanes 
and  floods  -  than  other  states  in  the  continental  U.S.  This  map  shows  the  frequency  per  state  of  weather 
disasters  that  have  resulted  in  over  $1  billion  in  damages  during  that  period. 
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Y2k  a  Mixed  Bag  for 
Disaster  Recovery  Pros 

The  year  2000  date  rollover  crisis  has 
had  both  positive  and  negative  effects 
on  the  disaster  recovery  field,  long¬ 
time  observers  say.  On  the  positive 
side,  it  drew  a  lot  of  attention  to  estab¬ 
lishing  contingency  plans  and  had 
companies  talking  to  their  vendors  and 
suppliers  about  disaster  scenarios,  says 
Dan  Bailey,  senior  manager  at  Protiviti 
Inc.,  a  risk  consulting  company  in  Dal¬ 
las,  and  a  member  of  the  professional 
groups  DRI  International  and  the  As¬ 
sociation  of  Contingency  Planners. 

But  Y2k  turned  out  to  be  a  nonevent 
because  of  the  efforts  that  went  into 


The  Ahnanac 


An  eclectic  collection  of  research 
and  resources.  By  Mitch  Betts 


Pop  Quiz 

Could  you  locate  your  disaster 
recovery  plan  in  the  next  five  minutes? 


Yes 

65% 


No 

32% 


Don’t  know 


Do  you  know  what  you’re  supposed 
to  do  under  the  plan? 


.  Don’t  know 


BASE:  Online  survey  of  227  IT  profess  lals  at 
organizations  that  have  a  disaster  recovery  plan 
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SNAPSHOTS 

Disaster  Budgets 

What  percentage  of  your 
organization’s  IT  budget  is  earmarked 
for  disaster  recovery? 


More  than  10%:  4% 

BASE:  Online  survey  of  281  IT  professionals 

SOURCE:  COMPUTERWORLD.  FRAMINGHAM.  MASS.. 
FEBRUARY  2004 


Plan  Updates 

How  recently  has  your  disaster 
recovery  plan  been  revised? 


Less  than  a  month  ago 

21% 

1-3  months  ago 

20% 

4-6  months  ago 

20% 

More  than  6  months  ago 

20% 

More  than  1  year  ago 

12% 

More  than  2  years  ago 

7% 

BASE:  Online  survey  of  222  IT  professionals  at 
organizations  that  have  a  disaster  recovery  plan 

SOURCE:  COMPUTERWORLD .  FRAMINGHAM.  MASS.. 
FEBRUARY  2004 


Remote  Backups 

How  often  is  remote-office  data 
backed  up  in  your  organization? 


Daily 

58% 

Weekly 

11% 

Monthly 

5% 

Frequency  varies* 

20% 

Other 

6% 

•Depending  on  the  remote  users 

BASE:  Online  survey  of  281  IT  professionals 

SOURCE:  COMPUTERWORLD.  FRAMINGHAM.  MASS.. 
FEBRUARY  2004 
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MARK  HALL 

Listen  to  Mom 

AMONG  THE  NUGGETS  OF  WISDOM  that  fell  from  my  mom’s  lips,  my  favorite  is: 
“Expect  the  worst.  You’ll  never  be  disappointed.” 

If  you’re  planning  to  move  a  portion  of  your  IT  operations  to  India,  your 
disaster  recovery  plan  had  better  involve  a  risk  management  assessment 
loaded  with  worst-case  scenarios.  Otherwise,  you  might  not  just  be  disap¬ 
pointed.  You  might  be  fired. 

Like  the  U.S.,  India  is  prone  to  natural  disasters.  There  are  floods.  Winds  and 
cyclones  cause  destruction  every  year.  Earthquakes  happen. 


But  unlike  the  U.S.,  India  benefits  from  disaster  re¬ 
covery  programs  sponsored  by  the  United  Nations, 
presumably  because  the  country’s  infrastructure  is 
more  fragile  than  those  of  other  nations  or  because  its 
ability  to  respond  is  less  robust.  Even  the  U.S.,  with  its 
notoriously  parsimonious  aid  to  developing  nations, 
includes  a  special  funding  program  for  disaster  recov¬ 
ery  in  India.  Perhaps  as  India  increases  its  wealth  by 
importing  IT  jobs  from  this  country,  it  will  reciprocate 
in  kind  one  day. 

Today,  however,  it  is  the  recipient  of  out¬ 
side  disaster  recovery  help,  a  fact  to  keep  in 
mind  when  you  consider  what  appear  to  be 
low-cost  offshore  IT  services. 

All  this  isn’t  to  say  that  the  buildings  that 
house  data  centers  in  Bangalore  are  at  more 
risk  of  being  hit  by,  say,  an  earthquake  than 
those  perched  along  the  San  Andreas  fault 
in  Silicon  Valley.  There’s  far  less  risk  of  an 
earthquake  in  India,  in  fact.  But  just  in  case, 
you’d  better  make  certain  that  your  off¬ 
shore  outsourcer  has  picked  its  site  and 
built  its  building  with  a  nervous  eye  on  the 
Richter  scale.  If  the  outsourcing  rep  is  san¬ 
guine  and  assures  you  that  you  needn’t 
worry  about  such  a  thing,  you’d  better  worry. 

Just  like  any  nation  plagued  by  natural  disasters,  the 
U.S.  has  a  mixed  record  of  getting  regions  up  off  their 
knees  after  Mother  Nature  has  whacked  them  with 
hurricanes,  floods,  tornados  and  temblors.  The  Federal 
Emergency  Management  Agency  has  been  both 
praised  and  damned  over  the  years  for  its  responses  to 
one  tragedy  or  another.  That’s  why  smart  IT  organiza¬ 
tions  don’t  even  consider  the  possibility  of  aid  from 
FEMA  when  they’re  designing  their  companies’  disas¬ 
ter  recovery  plans.  They  expect  to  handle  any  prob¬ 
lems  themselves. 

But  at  a  recent  conference  where  Indian  outsourcers 
were  pitching  their  cost-effective,  highly  talented  IT 
workers  to  software  vendors,  I  heard  about  the  close 
cooperation  between  the  Indian  government  and  out¬ 
sourcers  “in  everything  from  tax  incentives  to  disaster 
recovery.”  Hmmm. 

You’d  be  well  advised  to  deal  with  companies  like 


Sonata  Software  Ltd.,  which  doesn’t  lean  on  the  Indian 
government  and  backs  up  the  data  center  in  its  Banga¬ 
lore  headquarters  to  a  replicant  server  room  hundreds 
of  miles  east,  across  the  mountains  in  the  coastal  city 
of  Chennai.  Others,  like  Wipro  Ltd.  and  Tata  Consul¬ 
tancy  Services,  offer  very  similar  disaster  recovery 
plans  for  their  customers.  Anything  less  than  a  fully 
redundant  data  center  is,  as  my  mom  would  have  drily 
said,  courting  disappointment. 

If  you  had  to  have  a  disaster  recovery  plan  only  for 
your  data  in  India,  the  situation  would  be 
easy.  But  you  need  one  for  people,  too. 
When  disaster  strikes  (and  it  will),  does 
your  outsourcer  have  a  plan  for  how  soon 
key  employees  will  be  on  the  job  to  ensure 
that  your  business  gets  back  on  track?  For 
example,  does  the  company  have  a  private 
transportation  plan  in  the  event  that  public 
transit  comes  to  a  standstill?  And  given 
that  the  CIA  labels  India’s  communications 
systems  as  having  “mediocre  service,”  how 
will  your  outsourcer  deal  with  outages  af¬ 
ter  a  disaster? 

Also,  I  think  it’s  absolutely  essential  that 
you  hold  your  Indian  outsourcer  to  disas¬ 
ter  recovery  standards  that  are  higher  than  your  own. 
Why?  Because  you’re  not  there. 

A  few  years  ago,  I  was  in  the  Seattle  area  shaking 
hands  with  Boeing’s  vice  president  in  charge  of  com¬ 
puting  and  communication  systems  when  an  earth¬ 
quake  struck.  After  the  first  round  of  ground  wobbling 
stopped,  people  evacuated  the  buildings  and  met  at 
predetermined  gathering  points.  The  VP  took  a  single 
call  on  his  cell  phone  and  chatted  with  a  couple  of  un¬ 
derlings  in  accordance  with  IT’s  disaster  plan.  He  was 
calm,  even  lighthearted.  I  wondered  why. 

He  said,  “Oh,  I  can  see  that  everything  is  taken  care 
of.  People  are  OK.  Systems  are  OK.” 

He  could  “see”  because  he  was  there.  That’s  why 
your  Indian  (or  your  Canadian  or  Irish)  outsourcer 
needs  to  be  held  to  a  higher  standard  for  disaster  re¬ 
covery  —  because  you  won’t  be  able  to  see  for  your¬ 
self.  As  my  mom  also  used  to  say,  “Seeing  is  believing.” 
O  45954 
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MARKETPLACE 


www.computerworld.com 


An  entire  PC  inside  a  keyboard 

OPTIONS: 

internal  slim  CDRW/DVD  •  Internal  floppy  •  Internal  fax  modem  •  DVI  (Digital  Video) 
Parallel  Port  •  TV-Out  (NTSC/PAL)  •  Plastic  Skin  Protector  •  LCD  Displays:  15“,  17”, 

18"  and  19"  (touch  screen  available)  •  Wireless  802.11b/g  available 


Runs  all  Microsoft™  Windows  98/2K/XP/NT  operating  systems. 

U.  S.  Patent  Pending.  ©  2004,  Cybernet  Manufacturing,  Inc.  all  rights  reserved.  The 
Cybernet  logo  and  Zero-Footprint-PC  are  trademarks  of  Cybernet  Manufacturing,  Inc. 
Intel,  Intel  inside,  Pentium,  Celeron  are  trademarks,  or  registered  trademarks  of  Intel 
Corporation,  or  its  subsidiaries  in  the  United  States  and  other  countries.  Ail  other  regis¬ 
tered  trademarks  are  property  of  their  respective  owners.  Prices  and  specifications  are 
subject  to  change  without  notice.  All  prices  are  excluding  tax  and  shipping.  "Monitor 
not  induded. 


STANDARD  FEATURES: 

•  Intel®  Pentium®  4  Processor  up  to  2.80GHz/533  FSB 

•  128MB  DDR333  SDRAM  up  to  2GB 

•  40GB  IDE  7200  RPM  hard  drive,  up  to  any  size 

•  10/100  Ethernet,  4  USB  2.0,  2  IEEE1394  Firewire,  2  Serial  Ports 

•  2- Year  Limited  Warranty 

All  these  features  are  inside  the  keyboard! 


As  low  as 


$475 


T 


For  product  specs  and  model  options  visit  us  at:  WWW.Cy  bsmStniSn.COrn, 

orcaibTOLL  FREE  888-834-4577  International  949-477*0300 


Get  Rid  of  the  PC  Box. 

Save  Space. 


As  an  I.T  Manager,  your  greatest  challenge  could 
be  where  to  put  that  big  PC  BOX!  Cybernet  has 
created  an  innovative,  all-in-one,  Zero-Footprint-PC. 
The  entire  PC  fits  inside  a  normal  size  keyboard! 
This  design  has  helped  many  businesses  nationwide 
to  save  valuable  space. 
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How  does  your  rack  really  stack  up? 


Take  the  APC  Rack  Challenge  and  find  out  how 
the  New  NetShelter®  VX  outperforms  your  brand. 

Whether  you  are  consolidating  servers,  relocating  your  data  center,  or  centralizing 
distributed  networks,  selecting  the  right  brand  of  enclosure  is  crucial  to  successful 
implementation.  Take  the  APC  Rack  Challenge  today  to  make  sure  your  facts  and 
your  racks  really  stack  up. 


THE  APC  RACK  CHALLENGE 

Name:  Title: 

Company:  Phone: 

Address: 

How  many  racks  do  you  currently  have  installed? 

Features  to  expect  in  today's 

IT  rack  enclosures 

NetShelter*  VX 
(AR2101BLK) 

no  side  pahels 

Compaq  Rack 
10000  Series 

(245161-B21) 

no  side  panels 

Your  rack  brand  here: 

r  m.  mm  mm  m,  »  —  —  —  —  * 

1  I 

1  1 

1  1 

Integrated  rear  power  distribution 
channels  that  provide  zero-U, 
toolless  mounting  of  basic, 
metered,  and  switched  rack-mount 
power  distribution  units. 

Of 

8 

t  I 

Integrated  rear  cable  management 
channels  that  allow  efficient  cable 
routing  and  easily  accessible 
cable  containment 

& 

8 

t  I 

\  —  * 

Available  with  scalable 
cooling  options  to  support 
heat  densities  up  to  7.5kW*. 

8 

/***% 
t  1 

Exceeds  major  server  requirements 
for  front  door  ventilation. 

ft 

& 

i 

Meets  or  exceeds  warranty 
requirements  for  all  major  servers. 

& 

t  i 

InfraStruXure  compatible. 

Seamlessly  integrates  into  APC's 
modular,  manageable,  pre-engineered 
data  center  architecture. 

Q! 

8 

/N 

%  i 

Vendor  neutral  rack  configurator 
designed  to  support  most  third  party 
servers  and  networking  devices. 

& 

8 
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5-year  warranty 

_ 

t  » 

v/ 

“Fits  Like  a  Glove***  money  back 
guarantee  that  all  IT  equipment 
will  fit  in  the  rack. 

hp/coww  .  act  •  mm's 
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Compare!  Savings 
k  of  almost  40% 

*1039 

*1359' 

i$  ; 

i  i 

*■  ■* 

© 

TAKE  THE  RACK 
CHALLENGE  TODAY' 

Onlin 

http://f 

iromo.apc.com  •  Key  Code  q523y 

By  Fax: 

1)  Fill  in  your  business  information, 
indicate  your  rack  brand  of  choice, 
and  check  off  the  applicable  fields. 

2)  Fax  the  completed  Rack  Challenge 
to  the  following  number: 

Fax  401-788-2797 


(  "'X 


Yes!  _ 

I  took  the  {Qj 
APC  RACK  w 
CHALLENGE! 


m 

m *•« 


RECEIVE  *— 

YOUR  FREE  T-SHIRT 


Be  one  of  the  first  100  respon¬ 
dents  and  receive  a  FREE  "I  took 
the  APC  Rack  Challenge*  T-shirt! 


Designed  specifically  for  the  cabling, 
cooling  and  security  demands  of  today's 
IT  environments,  the  NetShelter*  VX  is  a 
complete  infrastructure  compatible  with  a 
full  range  of  integrated  APC  components. 
Vendor-neutral,  all  you  need  to  add  are 
the  servers  of  your  choice. 


NetworkAIR”  RM  Air  Distribution  Unit 
Unique  2U  rack-mounted  fan 
unit  delivers  additional  cool 
air  and  improves  circulation. 


1U  Rack-mount  LCD 
Monitor/Keyboard  Drawer 
Maximizes  space  in 
data  center  environments. 


Environmental  Monitoring  Unit 

Monitors  ambient  temperature,  a 

humidity  and  other  environmental  -  •••*•-  a 
conditions  in  racks. 


Rack-mount  PDU 

Provides  up  to  5.7kW  of  power, 
eliminating  the  need  for  multiple 
outlet  strips  per  rack.  Available  for 
both  single-  and  3-phase  input  power. 


*  Based  on  APC  Internal  Research  and  testing.  '*  See  link  on 
promotions  page  tor  terms  and  conditions,  t  Source  of 
average  pricing:  www.HP.com.  Prices  may  vary  or  change 
from  time  to  time.  Not  applicable  to  other  SKU's  or  models. 


Legendary  Reliability* 


©2004  American  Power  Conversion  Corporation.  All  Trademarks  are  the  property  of  their  owners  •  Call:  888-289-APCC  x6699  E-mail:  esupport@apcc.com  •  132  Fairgrounds  Road.  West  Kingston.  Rl  02892  USA  •  NS1A4EF-USa 
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IT  Careers  and  Diversity 


Talk  to  any  senior  business  leader  across  the 
United  States,  and  it  takes  little  time  to  get 
around  to  a  major  concern  -  having  enough 
technology  workers  for  the  future.  It's  a  hard 
message  to  sell  after  three  steady  years  of  layoffs 
and  off-shoring  of  work  in  the  technology  sector. 
The  concern  is  real,  however,  as  other  countries 
boast  of  growing  numbers  of  engineering  and 
technology  workers  -  workers  who  may  create 
the  next  great  breakthrough.  Add  to  the 
competitive  concern  the  recent  uptick  in  hiring. 
Companies  such  as  Lockheed  Martin  have 
announced  plans  to  hire  up  to  60,000  new 
workers  in  this  decade,  in  large  part  due  to 


retirements  but  also  to  fill  the  need  for  advanced 
technology  workers. 

The  competitive  issue  is  real,  too.  China 
graduated  more  than  300,000  engineers  in  2003; 
India  had  more  than  200,000.  Here  in  the  United 
States,  the  number  of  engineering  graduates  was 
slightly  over  78,000. 

It's  one  of  the  many  reasons  that  the  Information 
Technology  Association  of  America,  the  National 
Action  Council  for  Minorities  in  Engineering,  and 
the  Commission  on  Professionals  in  Science  and 
Technology  -  along  with  individuals  such  as 
Tyrone  Tabom,  founder  of  Career  Communications, 


and  companies  such  as  IBM  --  continue  to  pound 
home  the  message:  technology  careers  need  to 
appeal  to  a  broader  range  of  society;  we  need 
more  young  people  of  color  and  who  are  female 
to  seek  tech  careers. 

Jim  Sinocchi,  spokesman  for  IBM's  diversity 
initiative,  said  this  year's  Black  Family  Technology 
Week  (founded  by  Tabom)  and  La  Familia 
Technology  Week  scheduled  for  October  2004, 
continue  to  develop  and  reach  out  to  more  and 
more  communities.  The  focus  is  on  hands-on 
experience  with  technology.  "The  celebrities  of 
science  and  technology  are  telling  the  story," 
Sinocchi  explained. 


Top  1 0  Producers  of  2001  African  American  BS  Engineers 
Institution  #  of  Grads 

North  Carolina  A&T  166 

Georgia  Institute  of  Technology  1 1 2 

Tennessee  State  University  97 

Florida  A&M  93 

Morgan  State  University  88 

Southern  University  79 

Prairie  View  A&M  73 

Tuskegee  University  71 

North  Carolina  State-Raleigh  64 

University  of  Michigan  63 

Top  10  Producers  of  2001  American  Indian  BS  Engineers 
Institution  #  of  Grads 

Mass  Inst  of  Technology  1 1 

New  Mexico  State  University  1 0 

Oklahoma  State  University  10 

University  of  Oklahoma  8 

University  of  New  Mexico  7 

University  of  Washington  7 

Worcester  Poly  Institute  7 

University  of  Michigan  6 

Tie  for  9:  Arizona  State,  Northern  Arizona, Old  Dominion, 

San  Diego  State,  University  of  Alabama-Huntsville, 

University  of  Florida,  Washington  State  University 
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Source:  National  Action  Council  for  Minorities  in  Engineering 


Top  10  Producers  of  2001  Women  BS  Engineers 
Institution  #  of  Grads 

Georgia  Institute  of  Technology  330 

University  of  Michigan  309 

Penn  State  249 

University  of  Puerto  Rico  222 

University  of  California/Berkeley  21 8 

Texas  A&M  215 

Purdue  University  210 

Mass  Institute  of  Technology  207 

University  of  Illinois-Urbana  1 83 

Cornell  University  182 

Top  1 0  Producers  of  2001  Latino  BS  Engineers 
Institution  #  of  Grads 

University  of  Puerto  Rico  695 

Poly  Univ  of  Puerto  Rico  31 1 

University  of  Texas-EI  Paso  137 

Florida  International  University  118 

Texas  A&M  University  95 

University  of  Texas-Austin  88 

University  of  Florida  86 

Cal  Poly  Pomona  82 

Texas  A&M-Kingsville  65 

New  Jersey  Institute  of  Technology  64 


This  year's  Black  Family  Technology  Week  in 
February  showed  applications  of  technology  in 
everything  from  music  to  movie  production. 
During  La  Familia  Technology  Week  last  fall, 
Miyeara  Major  highlighted  her  use  of  computer 
data  in  identifying  a  previously  undiscovered 
primate.  It  didn't  hurt  that  Major  could  tell  her 
story  of  transition  -  from  professional  football 
cheerleader  to  scientist.  "There  is  not  a  metric  on 
how  well  we  succeed  with  young  people," 
Sinocchi  added.  "You  can  only  listen  to  how 
many  questions  they  ask  and  the  'wow'  factor." 

While  appealing  to  young  people  involves 
showing  how  technology  leads  to  careers  and 
role  models,  it  also  means  showing  them  the 
schools  that  attract  and  retain  diverse  students. 
While  these  colleges  are  heavily  weighted  by 
geography  and  membership  in  Historically  Black 
Colleges  &  Universities,  another  option  is 
emerging  -  eArmyU.  The  U.S.  Army's  distance 
education  programs  offers  coursework  to 
enlisted  soldiers,  many  of  whom  are  minorities. 
eArmyU  expects  to  serve  80,000  soldiers  over  the 
next  five  years. 


For  more  information  about  IT  Careers  advertising, 

please  contact:  Nancy  Percival 

Vice  President,  Recruitment  Advertising 

800.762.2977 

500  Old  Connecticut  Path 

Framingham,  MA  01701 

Produced  by  Carole  R.  Hedden 
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as  next  monti 
Scholarships 
Available!" 


Earn  your  degree  -  online! 

Use  your  IT  experience  or  certification  toward  the  completion  of  your  degree. 


Flexible  programs  for  busy  adults: 

BS  Computer  Information  Systems 
BS  Information  Technology  -  Network  Management* 
BS  Information  Technology  -  Project  Management* 

BS  Information  Technology  -  Security* 

BS  Information  Technology  -  Software  Development* 
BS  Business  -  IT  Management 
AS  Information  Technology 

*  Your  certification  may  waive  some  degree  requirements. 

Online.  Accelerated.  Affordable.  Accredited 

Federal  financial  aid  available  Regionally  accredited 


www.wgu.edu/IT  1-866-225-5948 


JAVA  PORTAL  DEVELOPER  / 
TECHNICAL  LEAD  -  A  company 
with  an  office  in  Andover,  Massa¬ 
chusetts,  engaged  in  investment 
management  for  retail  and  insti¬ 
tutional  clients,  has  a  immediate 
need  for  a  highly  skilled  Java 
Portal  Developer  /  Technical 
Lead.  This  experience-intensive, 
hands-on  technical  lead  /  men¬ 
toring  programmer  position  is  re¬ 
sponsible  for  creating,  maintain¬ 
ing  and  documenting  large-scale 
E-commerce  portals  based  on 
converted-into-Java  NetDynam- 
ics™  code,  and  containing  multi¬ 
ple  form-based  applications;  the 
position  is  also  responsible  for 
the  development  of  Epicentric 
modules,  J2EE  java,  and  SOAP- 
based  systems.  The  position 
also  involves  24-hour  /  7-day  on- 
call  availability.  The  position's 
duties  include  the  rapid  develop¬ 
ment  and  deployment  of  large- 
scale  E-commerce  prototypes 
containing  Adobe  Acrobat™ 
SDK-developed  components, 
and  working  models  custom 
developed  for  the  financial  ser¬ 
vices  industry;  the  creation  of 
web  sites  using  Epicentric's 
Foundation  Server™  and  devel¬ 
opment  of  custom  modules;  the 
utilization  of  the  SUNONE™  Ap¬ 
plication  Framework  to  develop 
Java  code,  and  to  conduct  per¬ 
formance  optimization  using 
automated  testing  tools;  the  cre¬ 
ation  of  web  services  using 
Simple  Object  Access  Protocol 
("SOAP”);  and  the  production  of 
high  quality  design  documenta¬ 
tion  and  user  manuals.  Minimum 
education  required  is  Bachelor's 
degree  in  MIS,  CS,  or  Math.  Min¬ 
imum  experience  required  is  at 
least  8  years  post-degree  busi¬ 
ness  applications  programming 
experience,  at  least  4  years  of 
which  specifically  involved  Java 
and  NetDynamics™.  Base  salary 
is  $  82,500  per  year.  Benefits  in¬ 
clude  fifteen  days  paid  vacation, 
contributory  medical,  dental,  dis¬ 
ability,  life  insurance,  and  other 
industry-competitive  benefits. 
Qualified  applicants  respond  with 
two  (2)  copies  of  resume  only  to: 
Case  #  200203977,  Labor 
Exchange  Office,  19  Staniford 
Street,  1st  Floor,  Boston,  MA 
02114.  An  EOE/MFHV. 


Web  Developer  to  design  devel¬ 
op,  and  modify  client/server  and 
web-based  software  on  a  distrib¬ 
uted  architecture  to  develop  fully 
interactive  web-based  e-learn- 
ing  applications  including  multi¬ 
ple  media  development  using 
XML/XSL,  HTML  (cross-browser 
development),  JavaScript, 
Dreamweaver,  Flash,  Java, 
mySQL,  SQL,  JSP,  ASP,  and 
.NET.  Builds  new  functions  and 
features  on  the  website  to 
improve  the  effectiveness  of 
websites  for  business,  con¬ 
sumer,  and  internal  users  using 
Java  and  JSP.  Analyzes  require¬ 
ments,  creates  specifications, 
and  develops  horizontal  and  ver¬ 
tical  software  applications  on 
Microsoft  Windows  platform. 
Develops,  enhances,  maintains 
and  supports  users  with  intranet 
applications.  Requires  Bachel¬ 
or's  Degree  in  Computer  Sci¬ 
ence,  Information  Systems,  or 
Information  Systems  Manage¬ 
ment  and  one  year  direct  experi¬ 
ence.  Send  resumes  only,  no 
calls,  to:  Traci  Knudson,  CFO, 
NogginLabs,  Inc.  4619  N. 
Ravenswood,  Ste  303,  Chicago, 
IL  60640. 


Systems  Analysts  (ERP/ 
Financials):  Analyze,  design  & 
administer  enterprise  apps.  and 
systems  including  financials/ 
transport  Admin./Mgmt.  in 
Lawson  Apps.  (Financials/ 
Admin.),  Oracle,  SQL  Server, 
Unix,  AS400,  COBOL,  VB.  For 
complete  job  description  or  to 
apply,  send  resume/contact 
HR/IT-SA,  URSI,  10701 
Middlebelt  Road,  Romulus,  Ml 
48174.  No  phone  calls  please. 
Principals  only.  EOE. 


Company  seeks  Sr.  Software 
Eng.  for  design  and  development 
of  object-oriented,  distributed  ob¬ 
ject,  and  component-based  and 
web-based  systems  including 
multi-tier  architectures.  The  Sr. 
Software  Eng.  utilizes  relational 
d-base,  ORACLE  under  Win¬ 
dows  NT/2000  and  UNIX  (Sun 
Solaris,  HP_UX)  to  dev.  s/w  in 
XML  &  Enterprise  Java  (incl. 
JSP,  EJB,  JMS,  &  Servlets  com¬ 
ponents).  Application  servers 
utilized  incl.  Webshop  &  Weblog- 
ic.  Object-oriented  systems  uti¬ 
lized  include  UML,  Rational 
Rose,  and  Visual  Cafe.  Salary  is 
$75000/yr.  f-t  (40  hrs/wk).  Min 
Req:  Bach,  or  foreign  degree 
equivalent  in  Computer  Eng., 
Eng.  or  related  +  2  years  exp.  in 
S/w  Devlpmnt  using  ORACLE 
under  Windows  NT  and  Unix 
(Sun  Solaris,  HPUX)  platforms 
in  app.  domains  as  follows: 
Enterprise  Java  (incl.  JSP,  EJB, 
JMS  and  Servlets),  XML,  and 
Object-oriented  systems  incl. 
UML,  Rational  Rose,  and  Visual 
Cafe.  PI.  submit  two  (2)  resum¬ 
es  to:  Case  #200204180  Division 
of  Career  Services  Labor  Certi¬ 
fication  Unit,  19  Staniford  St„  1st 
fl.,  Boston,  MA  02114. 


SQL  Server  Specialist,  Hunters¬ 
ville,  NC,  InterCerve,  Inc.  Man¬ 
age  database  admin,  services 
for  InterCerve's  managed  host¬ 
ing  operations  and  lead  the  sup¬ 
port  and  implementation  ser¬ 
vices  for  a  premier  SQL  Server 
tool.  Reqs.  BA  in  Comp.  Science 
&  4  yrs.  exp /  The  4  yrs  must  ind. 
work  w/  SQL  Server  Admin, 
product  dvlp.  cycles  &  process¬ 
es,  Windows  networking,  Win¬ 
dows  2000/2003,  Active  Direc¬ 
tory,  Microsoft  appl.  dvlp.  Exp. 
and  .NET.  3  yrs  of  exp.  must  incl. 
work  w /  T-SQL,  DTS,  BCP,  repli¬ 
cation,  clustering,  log  shipping  & 
writing  &  executing  software  ac¬ 
ceptance  tests.  M-F,  8-5,  Send 
resume  to  Human  Resources, 
InterCerve.  Inc.,  16415  D. 
Northcross  Drive.  Huntersville, 
NC  28078.  No  phone  calls. 
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Life  at  Lilly 


real  people  doing  extraordinary  things 


Lilly  is  about  breakthrough  medicines  and  treatments  to  confront  many  of  the  world’s  most  challenging  diseases.  It's  only  through 
our  diverse  workforce  that  we  are  empowered  to  discover  innovative  solutions  that  help  improve  lives.  The  varied  perspectives, 
experiences,  and  training  of  our  employees  fuel  the  creativity  and  energy  that  drive  our  company.  You  will  find  an  exceptionally 
diverse  group  of  people  at  Lilly  who  are  respected  for  who  they  are,  what  they  do,  their  differences,  and  similarities. 

We  invite  you  to  learn  more  about  Lilly's  challenging  and  rewarding  IT  careers  in  the  following  areas: 

•  Marketing  •  Research  &  Development  •  Finance  •  Clinical/Regulatory  •  Infrastructure  •  Manufacturing  •  SAP 


For  more  information  on  these  and  other  opportunities  or  to  apply  online,  please  visit  www.lilly.com/careers. 
Eli  Lilly  and  Company  is  an  equal  opportunity  employer. 


www.lilly.com/careers 


Answers  That  Matter. 
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Senior  Manager 

(Glen  Mills,  PA  and  other  com¬ 
pany  +  client  locations  through¬ 
out  the  United  States)  Manage 
design/execution  of  manual  + 
automated  conversion  of  data 
from  Mainframe-based  systems 
to  Oracle  8i  including  planning  a 
conversion  strategy,  developing 
program  specifications  and  con¬ 
version  programs,  overseeing 
data  entry  conversion  efforts 
and  conducting  data  loads  to  tar¬ 
get  systems.  Evaluate  technolo¬ 
gy  options,  prepare  cost/benefit 
analysis  and  conduct  Business 
Process  Re-engineering  and 
analysis  in  order  to  develop 
business  cases  to  identify 
appropriate  solutions  and  rec¬ 
ommend  changes  to  existing 
processes  for  public  sector 
agencies.  Responsible  for  man¬ 
aging  client  relations  and 
addressing  risk  assessment  and 
scope  management  issues  as 
well  as  developing  work  plans, 
project  budgets,  and  reviewing 
client  deliverables.  Oversee 
web-based  systems  implemen¬ 
tation  projects  for  public  sector 
agencies.  Draft  responses  to 
RFPs  (Request  for  Proposal)  by 
public  sector  agencies  and  write 
proposals  for  selling  engage¬ 
ments  in  order  to  identify  oppor¬ 
tunities  to  sell  businesses  to 
new  and  existing  clients. 

Salary:  $111, 132/year.  Work 
schedule  is  M-F  9am-5pm. 
Position  requires:  Master's 
degree  in  Business  Admin¬ 
istration,  Public  Policy  Manage¬ 
ment,  Engineering  or  Info 
Systems  plus  4  years  experi¬ 
ence  in  the  job  offered  in  related 
occupation  of  Senior  Manager, 
Manager,  Senior  Consultant. 
Experience  in  offered  position  or 
related  occupation  must  include 
1.5  years  of  experience  manag¬ 
ing  programs  for  public  sector 
agencies  including  drafting  RFP 
(Request  for  Proposal)  respons¬ 
es,  risk  assessment,  scope 
management,  and  work  plan 
development  in  addition  to 
Business  Process  Re-engineer¬ 
ing  and  analysis,  Testing  Tool 
WinRunner  and  Oracle. 

Please  send  your  resume,  refer¬ 
encing  Job  Order  Number  WEB 
406726  to:  PA  CareerLink,  FLC 
Unit,  235  W  Chelten  Ave., 
Philadelphia.  PA  19144.  EOE. 

Computers 

IT  Analyst 

Multiple  Openings.  Research 
Triangle  Park,  NC.  Participate 
in  IT  projects  involving  busi¬ 
ness  analysis,  project  manage¬ 
ment,  and  IT  strategy  and  sys¬ 
tem  development  for  R&D  IT 
department.  Perform  new  tech¬ 
nology  evaluations  and  imple¬ 
mentations,  object  oriented 
programming,  statistical  analy¬ 
sis,  client  server  and  network 
engineering,  and  database  sys¬ 
tem  development.  Analyze 
requirements  and  participate  in 
detailed  system  design.  Define 
detailed  systems  requirements. 
Perform  scope/  business 
needs  analysis  and  benefits 
realization  to  develop  IT  solu¬ 
tions  to  meet  needs  of  various 
business  sectors.  Req.: 
Master's  degree  in  CS  or  Info. 
Sys.  Mgmt.  Working  knowl¬ 
edge,  through  academic 
coursework  or  experience,  of 
the  following:  Together  and 
Rationale;  requirement  docu¬ 
mentation  &  info,  modeling 
techniques  incl.  use  cases,  log¬ 
ical  design,  ER  diagrams  & 
sequence  diagrams  &  testing  of 
info.  sys.  by  developing  testing 
plans,  test  cases  &  test  reports; 
COM,  DCOM,  EJB,  BizTALK  & 
object  oriented  design  &  pro¬ 
gramming;  and  XML  &  Web 
Services,  Oracle  Database 
Management,  Oracle  Forms, 
Apache  &  IIS. 

GSK  is  dedicated  to  an  innova¬ 
tive  workplace  and  supports 
you  with  career-long  opportuni¬ 
ties  &  learning.  We  offer  a 
competitive  benefits  and  com¬ 
pensation  package.  For  confi¬ 
dential  consideration  please 
forward  2  copies  of  resume  to: 
BHG  Box  33808,  220  E.  42nd 
St.,  14th  FI.,  NY,  NY  10017. 
Indicating  ad  code  "ITA"  is 
essential.  Principals  only,  no 
agencies.  GSK  is  proud  to  pro¬ 
mote  an  open  culture,  encour¬ 
aging  people  to  be  themselves 
and  giving  their  ideas  a  chance 
to  flourish.  GSK  is  an  equal 
opportunity  employer. 

Programmer  Analyst.  Sought  by 
Englewood  Colorado  consulting 
company  to  work  in  various 
unanticipated  locations  through¬ 
out  the  U.S.  Duties:  Analyze, 
plan,  develop,  test  and  docu¬ 
ment  computer  programs  includ¬ 
ing  network  communication  pro¬ 
grams.  Evaluate  user  requests 
and  software  program  require¬ 
ments  for  new  and  modified  pro¬ 
grams.  Write  specifications, 
code,  test  and  debug  computer 
programs.  Customize  software 
to  client  needs.  Use  of  Java, 
ATG  Dynamo,  Oracle,  HTML, 
C/C++,  Pert  5.0  and  Windows 
NT.  Reqs.  Bachelor  or  equiva¬ 
lent  in  Computer  Science, 
Computer  Engineering,  Engin¬ 
eering  (any  field)  or  related  field. 
Plus  6  mos  in  the  job  offered  or 
6  mos  in  a  related  occupation, 
including  Programmer,  Software 
Engineer  or  Systems  Analyst. 
$66, 000/year,  40/hrs/wk,  8AM- 
5PM.  .  Respond  by  resume  to 
WORKFORCE  DEVELOP¬ 

MENT  PROGRAMS,  PO  Box 
46547,  Denver,  CO  80202,  and 
refer  to  Job  Order  No.  CO 
5073173 

Software  Engineers  & 
Programmer  Analysts 
needed.  Exp.  in  Client 
Server  Applications  w / 
ERP  Packages  &  Web 
applications  preferred. 
Seeking  qual.  candidates 
possessing  AA/BS/MS 
degree  or  equiv.  and/or 
rel.  work  exp.  Send  res., 
ref.,  &  sal.  req.  to  Saiven 
Info  Links,  Inc.,  1425 
Louis  Ave.,  #104,  Elk 
Grove,  IL  60007. 

Software  Enaineers 

Design  and  develop  Enterprise 
Application  Integration  (EAI) 
solutions. 

Min.  Educ.  Bachelor's  degree 
or  equi.  Some  positions  re¬ 
quire  Master’s  degree  or  equi. 
Min.  Exp.  -  Adequate  industry 
experience.  Job  may  involve 
working  at  various  locations 
throughout  the  US. 

Please  send  resume  to: 

Selectiva  Systems,  Inc. 

3333  Warrenville  Rd. 

Suite  200 

Lisle,  IL  60532 

System  Analysts  to  analyze, 
design  appls  using  Java,  VB, 
JScript,  VBScript,  HTML,  Orac¬ 
le,  DB2,  ASP  under  Windows/ 
UNIX  OS;  responsible  for  pro¬ 
ject  planning,  time  &  cost  sched¬ 
ules,  quality  of  deliverables; 
study/evaluate  new  technolo¬ 
gies/methodologies;  provide 
tech/business  guidance  for  com¬ 
plex  user  problems;  provide 
methodologies  to  follow;  interact 
with  clients.  Require:  Master's  or 
foreign  equiv  in  CS/Engg(any 
branch)/Business  Admin.  High 
Salary.  F/T.  Travel  involved. 
Resume  to:  HR,  Salem  Associ¬ 
ates,  Inc.,  405,  6th  Ave.,  Ste 
102,  Des  Moines,  IA  50309. 

Senior  Systems 
Analyst/Programmer 

Translate  business  require¬ 
ments  into  comprehensive  an¬ 
alysis  and  design  models  using 
UML  and  Rational  XDE/Rose. 
Build,  test  and  deploy  applica¬ 
tion  and  database  components 
over  Weblogic,  Oracle8i,  SAS 
and  Unix.  Assist  in  the  develop¬ 
ment  of  asynchronous  messag¬ 
ing  infrastructures  and  contracts 
using  JMS,  XML,  XSD,  J2EE 
and  JDBC.  Position  utilizes 
object-oriented  analysis  and 
design  concepts  such  as  pat¬ 
terns  and  frameworks.  Req.  2 
years  previous  experience.  Prev 
exp.  must  involve  developing 
analysis  and  design  models 
using  UML  and  Rational  XDE / 
Rose.  Apply  to:  BLC  Consulting, 
26  Jefferson  Court,  Wethers¬ 
field,  CT  06109. 

Computer:  Software  Engineer, 
Programmer  Analysts,  Database 
Analyst,  Systems  Analyst, 
Network  Admin,  for  NJ  IT  firm. 
Need  Bach  +1  yr  exp  for  Jr.  Lvl 
positions  and  Masts  +2  yrs  or 
Bach  +  5  yrs  of  exp  for  Sr.  Lvl 
position.  Various  skill  req: 
Oracle,  VB,  PL/SQL,  SQL’Plus, 
Java,  JDBC,  Java  Servlets,  RMI, 
JFC,  Swing,  Java  Beans,  Cl 
C++,  Win  NT/2000,  MS  Access 
2002,  UNIX,  Shell  Scripting, 
Dream  weaver.  Websphere, 
Web  logic,  TOAD,  HTML, 
DHTML,  ASP,  Javascript,  XML, 
Rational  Rose,  Peoplesoft  & 
SAP,  Oracle  Financials,  Data¬ 
warehousing,  QA  testing, 
Microsoft,  Net.  Apply  w/  2 
copies  of  resume  to  HRD, 
Software  Research  Group,  Inc., 
485  E  Rt  1  South,  #240,  Iselin, 
NJ  08830. 

Programmer  Analyst  needed. 
Duties  include  performing  main¬ 
tenance,  code  and  test  existing 
programs:  analyze  and  develop 
programs.  Work  with  the  follow¬ 
ing:  VB,  .Net,  Oracle,  Java  and 
Tibco  Integration  Suite.  Req.:  4 
yrs  of  rel.  work  exp.  or  a  BS 
degree  or  equivalent  and  2 
years  of  rel.  work  exp.  MS 
degree  preferred.  Exp.  must 
include  2  years  developing 
mainframe,  client/server,  or  web 
applications.  No  relocation.  Mail 
resume,  references  and  salary 
requirements  to  Inventory 
Locator  Service,  LLC,  Attn: 
Human  Resources,  Job  Code 
IS308,  8001  Centerview  Park¬ 
way.  Suite  400,  Memphis,  TN 
38018. 

S/WEngineers  to  analyze,  de¬ 
sign,  develop  financial  appls 
using  OOD.C++,  VC++,  MFC, 
Visual  Source  Safe,  SQL  Server, 
Rational  Rose,  CrystalReports, 
FtAIMA,  ImageMan,  ADO  under 
Windows/UNIX  OS;  perform 
system/functional  req  analysis; 
document  detailed  project 
specs,  review  conceptual  mod¬ 
el  with  users;provide  training/ 
user  support  for  related  soft¬ 
ware;  perform  debugging/modifi¬ 
cations  of  existing  software. 
Require:  M  S.  or  foreignequiv.  in 
CS/Engg.  (any  branch)  with  1  yr 
exp  in  IT.  High  Salary.  F/T  posi¬ 
tion.  travel  involved.  Resume  to: 
HR,  Autosig  Systems,  Inc.,  201, 
Price  Hills  Trail,  Sugar  Hill,  GA 
30518. 

Software  Engineer.  Develop 
&  implement  web  sites  for 
client  companies  using 
Vignette  &  e-business  s/w 
products.  Integrate  XML 
technologies  &  solutions  into 
Java  based  framework  & 
troubleshoot.  Req:  Bachel¬ 
or’s  in  Comp.  Sci.,  Comp. 
Eng.,  Electrical  Eng.,  or 
Business  Mgmt.  40hrs/wk. 
Job/Interview  Site:  Long 
Beach,  CA.  Send  resume  to 
UniSAP,  Inc.  @  24881  Alicia 
Pkwy,  Laguna  Hills,  CA 
92653. 

WEB  DEVELOPER  to  design 
and  develop  customized  web 
applications  using  C#,  VB.NET, 
ASP.NET,  ADO.NET,  XML, 
ASP,  JavaScript,  VB.COM  and 
Object  Oriented  Design  princi¬ 
ples;  create  a  central  code 
base  for  rapid  generating  sta¬ 
tistical  analysis  websites  (CMI's 
QtabsTM);  develop  Windows- 
based  applications  to  automate 
survey  sample  management; 
create  VBA  for  statistical  analy¬ 
sis  of  survey  data;  manage 
data  in  SQL  Server  2000  with 
Triggers,  Cursors,  Stored  pro¬ 
cedure,  Functions,  DTS,  and 
Full-Text  Index  search.  Re¬ 
quire:  Bachelor's  in  Computer 
Science/Information  Systems. 
Competitive  salary  offered. 
Apply  with  resume  to:  Vice 
President,  ConsumerMetrics, 
Inc.,  1745  Old  Springhouse 
Lane,  Suite  400,  Atlanta,  GA 
30338. 

Systems  Analyst  (GA)  Design, 
develop,  code,  test,  debug  & 
troubleshoot  a  variety  of  prod¬ 
ucts  in  a  client  server  environ¬ 
ments  using  Oracle  2000,  C  & 
Visual  C++  on  IBM  compatible 
PCs  &  UNIX  based  servers. 
Develop  special  modifications  & 
internet  accessing  enhance¬ 
ments  for  SDL  &  MBB  platforms 
applying  Java,  RMI,  TCP/IP  & 
EJB  in  Linux  &  Sun  Solaris  envi¬ 
ronments.  Conduct  change  & 
impact  analysis,  quality  reviews 
&  engage  in  custom  develop¬ 
ment  of  key  modules.  Bachelor's 
degree  or  equiv.  in  Computer 
Science  or  any  Engineering  or 
related  field,  and  relevant  expe¬ 
rience.  Send  cover  letter  and 
resume  to  Vivian  Fernandes, 
MBT  International,  Inc.,  400 
Perimeter  Center  Terrace  NE, 
Suite  900,  Atlanta,  GA  30346. 

Chief  Technical  Officer:  Co. 
developing  new  Speech, 
Telephony,  Vision  &  Internet 
products.  Strategic  planning, 
client  projects,  multi-media  con¬ 
current  sys,  lead  developers, 
assign  projects.  Req’s:  PhD  Deg 
in  Comp  Sci,  Comp  &  Info  Sci  or 
related  field.  3  yrs  exp  In  job 
offered  or  3  yrs  advanced  tech¬ 
nology  software  development 
exp  which  must  incl.,  concurren¬ 
cy  theory  &  practice,  real-time  & 
large-scale  object-oriented  sys. 
Exp  can  have  been  gained  while 
pursuing  degree.  Proficiency  in 
Java,  C++,  Visual  Basic,  Oracle, 
RDBMS,  Telecom  &  Internet. 
Ability  to  present  &  publish 
results.  40hrs/wk.  Send  res.  to 
D-3,  P.O.  Box  506,  Phila,  PA 
19105. 

Senior  Internet 
Applications  Developer 

Affiliated  Computer  Services, 
Inc.  (ACS)  currently  has  an  op¬ 
ening  for  a  full  time  Senior 
Internet  Applications  Developer 
in  its  Lexington,  Kentucky  opera¬ 
tions.  Must  have  Bachelor  de¬ 
gree  in  Computer  Science  or 
Engineering  with  5  years  experi¬ 
ence  in  designing  and  develop¬ 
ing  web  based  applications  us¬ 
ing  Java  and  ASP  including 
therein  2  years  experience  de¬ 
signing  EDI  and  DDE  applica¬ 
tions  according  to  HIPAA  regula¬ 
tions  using  Cold  Fusion.  Must 
have  authorization  to  work  in  the 
U.S.  Please  send  resume  by 
mail  to:  Technical  Recruiter, 
2432  Fortune  Drive,  Suite  120, 
Lexington,  KY  40509  or  via  fax 
to  859-389-4182.  No  phone 
calls  please.  EOE 

Sr.  S/W  QA  Eng  sought  to  perf 
s/w  component  or  app  testing, 
incl  functional  testing,  installa¬ 
tion  testing,  integration  testing 
@  component  level,  stress/load 
testing  @  app  level,  user  inter¬ 
face  testing,  patch  testing,  doc 
testing,  &  performance  testing 
@  component  level.  Bach  in  CS, 
Eng,  or  closely  related  req'd; 
4yrs  SQA  exp  req'd.  Knowledge 
of  SQA  concepts  functional  test¬ 
ing,  integrated  testing,  doc  test¬ 
ing,  &  test  environment  set  up; 
telecom  stndrds  incl  SS7,  TCAP, 
ISUP,  IS41P,  IS826,  &  IS771; 
exp  w /  scripting  lang;  hands-on 
exp  creating  SS7  load  &  function 
test  using  INET/MGTS  script 
dvlp;  understanding  of  entire 
S/W  dvlpmt  process,  incl  specifi¬ 
cation,  doc,  &  QA.  Contact 
Lightbridge,  Inc.,  320  Inter- 
locken  Pkwy,  Broomfield,  CO 
80021.  Attn:  Cynthia  Kelly  w/  2 
resumes.  Job  #1465.0101. 

System  Developer:  Design,  de¬ 
velop,  and  implement  software 
system  for  government  Head 
Start  and  Pre-K  program  using 
C#.net,  ASP.net  and  Microsoft 
SQL  Server  databases.  Work 
with  identified  software  prob¬ 
lems  to  determine  the  sequence 
of  events  that  cause  the  problem 
and  to  correct  any  deficiency. 
Involved  in  all  phases  of  enter¬ 
prise  development  including  se¬ 
quence  diagram  and  class  dia¬ 
gram.  Req.  BS  or  equivalent  in 
CS  or  CIS.  Must  be  proficient  in 
C#.net,  Developer  Express  Xtra- 
Grid  Suite,  SQL  Server,  Installa¬ 
tion  Shield  and  Crystal  Report. 
MCSD  Certificate  required.  40 
hr/wk,  9-5.  Send  resume  to 
ChildPlus  Software,  Inc.  at  1117 
Perimeter  Center  West,  Suite 
300W,  Atlanta,  GA  30338. 

LOOKING  FOR  A  NEW 
IT  CAREER? 
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IMPATH  Inc.,  is  in  the  business 
of  improving  outcomes  for  can¬ 
cer  patients,  and  is  a  leading 
source  of  cancer  information 
and  analyses.  We  develop  and 
offer  innovative  products  and 
services  that  allow  for  more  ac¬ 
curate  diagnoses,  and  effective 
treatments  for  cancer  patients. 
Our  talented  IT  team  leads  the 
way  in  our  success,  laying  the 
groundwork  for  excellence. 

HP-UNIX  ADMINISTRATOR 
Based  in  our  NYC  operations, 
you  will  be  responsible  for 
administering  K,  D  Class  HP- 
UNIX  Servers  and  HP  Storage 
Arrays.  Knowledge  of  HP  back¬ 
up  tools  such  as  OMNIBACK  II 
&  HP  Data  protector  5.0  and 
Microsoft  Windows  NT/2000 
Server  Administration  are  re- 
uired.  The  ability  to  maintain, 
iagnose,  and  repair  COMPAQ 
Server  Hardware,  and  familiarity 
with  specific  healthcare  billing 
and  networking  concepts,  insur¬ 
ance  applications,  and  network 
devices  such  as  Router,  Switch¬ 
es  and  firewalls  are  essential. 

Candidates  must  be  a  Microsoft 
Certified  System  Engineer  with 
4+  years  experience,  and  have 
previously  assisted  laboratory 
departments  in  the  generation  of 
accurate  scientific  patient  re¬ 
ports.  The  ability  to  provide  end 
user  support  for  Microsoft  office 
products,  home  grown  and  im¬ 
aging  applications  is  required. 
HP  UNIX  and  Windows  2000 
Platform  training  from  authoriz¬ 
ed  training  centers  is  preferred. 

We  offer  a  highly  competitive  sa¬ 
lary  and  comprehensive  benefits 
package  that  includes  immedi¬ 
ate  medical/dental/vision  bene¬ 
fits,  3  weeks  vacation  to  start 
and  100%  fully  vested  401(k). 
For  immediate  consideration, 
please  apply  online  through  the 
"Careers"  section  of  our  website 
at  www.impath.com  EOE 
I M  PATH 

The  Cancer  Information 
Company 


Database  Analyst.  BS  in  comp, 
sci  or  nel.  field;  exp  to  incl.  DB2 
(physical  dsgn,  implmt.,  change 
mgt.,  backup  &  recovery,  &  per¬ 
formance  tuning),  DB  apps.: 
demonstrate  know,  of  main¬ 
frame,  distributed,  &/or  web 
prog,  lang.;  demonstrated  com¬ 
munication  skills,  knowl  of  insur¬ 
ance  &  fin,  svces,  &  willing  to 
travel  &  do  on-call  support. 
JOB#ACW231 72. 

IT  Systems  Analyst.  BS  in  comp, 
sci  or  rel.  field  exp.  to  incl  J2EE 
app.  servers,  object  oriented  & 
internet  technologies,  distributed 
computing  &  enterprise  connec¬ 
tivity,  web  app.  dev.,  sys.  admin. 
&  monitoring  tools,  formal  itera¬ 
tive  dev.  proc.,  &  mult,  platforms 
(Unix  &  Windows);  demonstrat¬ 
ed  communication  skills,  knowl 
of  insurance  &  fin.  svces,  &  will¬ 
ing  to  travel  &  do  on-call  sup¬ 
port.  JOB#ACW231 73. 

Java  Developer.  BS  in  com.  sci 
or  rel.  field;  exp.  to  incl.  Java 
(servlets  &  JSPs),  struts, 
XSL/XML  &  DB2;  demonstrated 
communication  skills,  know)  of 
insurance  &  fin  services,  &  will¬ 
ing  to  travel  &  do  on-call  sup¬ 
port.  JOB#ACW23171.  Resume 
&  cvr  Itr  to:  Principal  Financial 
Group:  opportunity@exchange.prin- 
dpal.com;  HR  Employment,  Des 
Moines,  IA  50392-0550.  Refer  to 
JOB  ffs  mentioned  above. 
AA/EEO 


Programmer  Analyst 

Watts  Up  Inc.  (  Ossining, 
NY)  seeks  software  pro¬ 
fessional  to  design,  devel¬ 
op  and  implement  busi¬ 
ness  applications  and 
software.  Experience  in 
Oracle,  SQL,  ASP,  Visual 
Basic  and  ERP.  (Navision) 
a  plus.  Competitive  sal¬ 
ary.  Mail  resume  and 
requirements  to:  187  Main 
Street,  Ossining,  NY 
10562.  EOE 


IT  PROFESSIONALS: 

Senior  Consultant 

Position:  (Glen  Mills,  Penn¬ 
sylvania  and  other  locations 
through  the  U.S.).  Responsible 
for  providing  clients  with  profes¬ 
sional  consulting  services  in  the 
area  of  infrastructure  require¬ 
ments  including  the  develop¬ 
ment,  testing  and  implementa¬ 
tion  of  system  software  tailored 
to  clients'  business  needs  and 
requirements.  Provide  support 
for  the  procurement  of  hardware 
and  software  including  require¬ 
ments  gathering.  Provide  techni¬ 
cal  design  and  development  of 
data  structures  and  databases 
to  ensure  the  accessibility,  secu¬ 
rity,  and  integrity  of  clients'  busi¬ 
ness  data  and  systems. 
Responsible  for  logical  and 
physical  data  analysis  and  mod¬ 
eling  of  c-tree  and  Oracle  and 
ensuring  data  architecture  stan¬ 
dards.  Responsible  for  installa¬ 
tion,  upgrades,  administration, 
tuning,  backup  and  recovery 
strategy,  implementation  and 
maintenance  of  c-tree  and 
Oracle  databases  on  Sun 
Solaris  and  other  operating  sys¬ 
tems.  Engage  in  the  installation, 
configuration,  administration  of 
Sun  Solaris,  including  the  con¬ 
figuration  of  network  interfaces, 
veritas  volume  manager,  root 
disk,  and  application  of  patches. 
Develop  technical  specifications 
and  design  policies,  procedures 
and  workflows  and  conduct 
tests,  review  controls,  imple¬ 
ment  systems  and  documenta¬ 
tion.  Responsible  for  failover 
design  including  sun  cluster 
installation  and  registration  of  c- 
tree  high  availability  agents. 
Coordinate  software  installation 
and  configuration  including  sun 
cluster,  MQ  series,  Veritas  vol¬ 
ume  manager,  etc.  Coordinate 
and  assist  on  tuning  of  Siebel 
EAI  (Enterprise  Application 
Integration)  and  EIM  (Enterprise 
Integration  Manager),  develop 
CICS-Cobol  online  and  batch 
applications,  and  oversee  and 
upgrade  Oracle  applications. 
The  wage  offered  is  $94,340  per 
year. 

The  work  schedule  is  Monday- 
Friday,  9:00  am  to  5:00  pm.  The 
minimum  requirements  are  as 
follows:  Bachelor's  degree  or 
equivalent  in  Computer  Science, 
Math,  Engineering  (any),  Infor¬ 
mation  Systems  or  Business 
Administration  +  3  years  of 
experience  in  the  job  offered  or 
3  years  of  experience  as  a 
Senior  Consultant,  Consultant  or 
Senior  Officer.  Employer  will 
regard  a  foreign  degree  to  be 
equivalent  to  a  U.S.  Bachelor's 
degree  as  determined  by  an 
accredited  credentials  evalua¬ 
tion  service.  Related  experi¬ 
ence  must  include  at  least  1 
year  of  experience  in  Sun 
Solaris,  c-tree,  Oracle  Data¬ 
base,  MQ  Series,  Siebel  EAI 
(Enterprise  Application  Integ¬ 
ration)  and  Siebel  EIM 
(Enterprise  Integration  Man¬ 
ager) 

Please  send  your  resume,  refer¬ 
encing  Job  Order  Number 
WEB406903  to  the:  PA 
Careeriink,  FLC  Unit,  235  W. 
Chelten  Avenue,  Philadelphia, 
PA  19144.  EOE. 


COMPUTER 

PricewaterhouseCoopers  LLP 
Tax  practice  has  opportunities 
available  for  experienced  pro¬ 
fessionals  in  the  area  of  Sys¬ 
tems  Development  and  Adminis¬ 
tration.  Positions  require  a  bach¬ 
elor's  (master's  preferred)  in  CS, 
MIS  or  CE  &  3  to  7  yrs  related 
exp.  Additional  qualifications  re¬ 
quired  include  Lotus  Notes  de¬ 
velopment  exp  &  Oracle  PL/SQL 
exp.  Job  site/location:  Washing¬ 
ton,  DC.  Interested  candidates 
please  reference  job  code 
55JPLN  &  fax  resume  to  PwC 
GTT  Recruiting  at  813-348- 
7980.  No  phone  calls  please. 
Employer  will  only  consider 
applicants  authorized  to  work  for 
any  employer  in  the  U.S. 


CWM1KME/W/MW.4 


Let  your  computer  work 
even  harder  for  you. 


Search  smarter  with  tools  to 
match  you  with  the  perfect  job. 
Now  faster  than  ever 
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Sr.  Software  Engineer/Devel¬ 
oper,  Database  Architect  want¬ 
ed  by  MD  Soft,  Inc.  Candidate 
must  have  minimum  BS  with  5- 
yr  experience  in  IT  field  includ¬ 
ing  experience  in  data  ware¬ 
house  design,  ETL  develop¬ 
ment,  using  Acential  datastage. 
Please  contact  mdsoftinc@ 
vahoo.com.  EOE. 

K&M  Softech  is  looking  for  pro¬ 
grammer/system  system,  soft¬ 
ware/project  engineers  or  IT 
professionals.  Both  entry  & 
experienced  levels  needed. 
Some  positions  require  travel. 
Skills  in  C/++,  VB,  Java, 
Oracle,  SAP,  SQL  are  plus. 
Please  send  resumes  to 
Recruit@.kmsoftech.com.  EOE. 


CGI  Inform.  Sys  &  Management 
Consultants,  Inc.  is  looking  for 
Sr.  IT  Consultant  to  develop  web 
portal  applications  using  Oracle 
9IAS,  data  warehouse  using  pi/ 
sql,  reports6l  &  discoverer.  Min. 
MS  plus  exp.  of  Oracle  X/8/9, 
9IAS,  PL/SQL,  JavaScript. 
Contact  lisa.haltenS)  cai.com. 
No  calls.  EOE 

Material  Management  Analyst 
wanted  by  Danco  (subsidiary  of 
NCH  Corp)  to  handle  manage¬ 
ment  of  import  &  vendor  rela¬ 
tions!,  obsolete  inventory.  Out¬ 
sourcing  activities.  Must  have 
minimum  bachelor  in  manage¬ 
ment  with  experience.  Please 
apply  at  chhscol@nch.com. 
EOE.  No  calls. 


Software  Engineers  to  design, 
develop,  maintain  appls  using 
OOAD,  Java,  XML,  JSP,  Java¬ 
Script,  HTML,  JDBC,  EJB,  JFC, 
Java  beans,  CORBA,  Weblogic, 
RationalRose  etc;  perform  reqs/ 
problem  analysis,  solution  de¬ 
sign,  implementation,  documen¬ 
tation  on  developed  appls;  pro¬ 
vide  training  and  user  support 
for  appls;  study/evaluate  new 
tech.  &  methodologies;  perform 
project  planning,  time/cost 
scheduling.  Require:  MS  or  for¬ 
eign  equiv.  in  CS/Information 
systems/Engg.(any  branch)/  &  1 
yr  exp.  in  IT.  Comp,  salary,  f/t. 
travel  involved.  Send  Resumes 
to:  HR,  Opal  Soft,  Inc.  3150 
Almaden  Expwy  Ste  205,  San 
Jose,  CA  95118. 


Software  Engineer/  Prog¬ 
rammer  Analysts  for  con¬ 
sulting  co  in  Skillman,  NJ. 
Must  have  Bach  degree  in 
Comp  Sci/Comp  Eng  or 
reltd  field  &  1-3  yrs  exp. 
Send  resume  to:  Optimal 
Solutions,  3  Richmond 
Drive,  Skillman,  NJ 
08558. 


Staff  Engineer/Technical  Group 
Leader  -  Design  component- 
level  hardware  for  GSM  devices 
to  meet  European  EMC  regula¬ 
tory  reqmts.  Determine  develop¬ 
ment  objectives,  perform 
processor  integration,  design 
audio  circuitry  &  provide  SIM  & 
DAI  interfaces;  40  hrs/wk.  Must 
have  MS  in  Electronics  Engrg, 
Electronics/Communications 
Engrg  or  Electronics/Computer 
Engr  &  3  yrs  exp  OR  BS  in 
Electronics  Engrg,  Electronics/ 
Communications  Engrg  or 
Electronics/Computer  Engr  &  5 
yrs  progressive  exp  in  the  spe¬ 
cialty  field.  Contact  Panasonic 
Mobile,  1225  Northbrook  Pkwy, 
Suwanee,  GA  30024,  Attn:  D. 
Greer,  MR. 


Jr.  Software  Engineer:  Entry- 
level  position  to  assist  Sr. 
Software  Engr  in  developing 
projects  for  co.  MediaXtreme 
prod.  &  website  using  Assembly 
Language,  C/C++,  VB,  ASP  & 
Network  Communication  w / 
Windows/Linux  platforms.  Req. 
B.Sc.  in  Com.  Engr.  or  a  related 
field.  No  exp.  req.  but  must 
demo  ability  to  perform  job 
through  either  course  work  or 
project  involving  Assembly 
Language,  C/C++  &  Network 
Communication.  Resume  w / 
transcript  to  Engr  Director, 
Keywest  Technology,  14563  W. 
96th  Terrace,  Lenexa,  KS  66215 


Software  Developer  III  to  per¬ 
form  small  scale  systm  or 
subsystm  dsgn.  B.S.  in  Comp. 
Sci.,  Eng.  or  MIS  or  rel.  field  + 
3  yrs  exp.  w/C,  C++,  VB,  Java 
&  Perl  on  Windows  &  UNIX. 
Exp.  w/Palm  OS;  Oracle 
Reports  Builder,  Oracle  9iDS; 
and  LoadRunner  reqd. 
Resumes  to:  Margo  Massey, 
2510  North  Dodge  St.,  Iowa 
City,  IA  52245. 


SBI  is  looking  for  the  following 
positions  for  its  offices  In 
Houston,  TX,  San  Francisco, 
CA,  Warren,  NJ,  Salt  Lake  City, 
UT  and  Portland,  OR:  Art 
Director,  Web  Designer, 
Programmer  Analysts,  Technical 
Architects,  Technical  Consul¬ 
tants.  Business  Strategists, 
Systems  Analysts,  Software 
Engineers,  Software  Deve¬ 
lopers,  SAP  Consultant, 
resumes  by  email  or  fax  only  to 
HR,  S8I  2825  East  Cottonwood 
Parkway,  Suite  480,  Salt  Lake 
City,  UT  84121: 

careers@sbiandcompany.com; 
Fax  (801)  733-3201. 


Systems  Analysts  to  provide  in 
depth  analysis,  design,  develop¬ 
ment  and  testing  services  for 
database  dev  projects;  perform 
project  scoping,  planning,  pro¬ 
ject  time/cost  schedules,  quality 
of  deliverables, study/evaluate 
new  techs/methodologies;  pro¬ 
vide  business  guidance  for  com¬ 
plex  user  problems;  guide  teams 
by  providing  methodologies  to 
follow;interact  with  clients  on 
project  related  issues.  Require 
Masters  degree  or  foreign  equiv 
in  CSor  Business  Admin.  High 
salary,  f/t  position.  Travel 
involved.  Resumes  to  HR, 
Smartsoft  International,  Inc., 
4898,  South  Old  Peachtree  Rd, 
Norcross,  GA  30071. 


Oracle  Applications 
Database  Administrators 

Install,  Maintain,  Upgrade  and 
Tune  Oracle  Applications  11i. 

Min.  Educ.  Bachelor’s  degree 
or  equi.  Some  positions  re¬ 
quire  Master’s  degree  or  equi. 
Min.  Exp.  -  Adequate  industry 
experience.  Job  may  involve 
working  at  various  locations 
throughout  the  US. 

Please  send  resume  to: 
Selectiva  Systems,  Inc. 
3333  Warrenville  Rd. 

Suite  200 
Lisle,  IL  60532 


PROGRAMMER  ANALYSTS  for 
Buffalo  Grove,  IL  office.  Design 
&  develop  software  applications 
using  VB,  Oracle,  Coolgen, 
Interwoven,  PVCS,  Erwin,  ASP, 
XML,  UML;  Develop  &  imple¬ 
ment  client/server  applications 
in  Oracle  Financials  using  syn¬ 
chronization  techniques  in 
Oracle  tools  such  as  PL/SQL, 
Developer  2000  &  Designer 
2000.  Bachelors  reqd  in  Com¬ 
puters,  Engineering,  or  any 
related  field  of  study  +  2  yrs  of 
related  exp.  40  hrs/wk.  Must 
have  proof  of  legal  authority  to 
work  permanently  in  the  U.S. 
Send  resume  to  HR  Manager, 
Option  Care,  Inc.,  485  Half  Day 
Road,  Ste.  300,  Buffalo  Grove, 
IL  60089. 


Sr.  Prog.  Analysts  to  analyze, 
design,  develop  client  server/n- 
tier  appls  using  C,  C++,  Java, 
Peri,  HTML,  SQL  Server,  XML, 
ASP,  JSP,  Servlets,  EJB,  Web¬ 
logic,  Java  Scripts,  etc.  under 
Windows,  Unix  os;  tune  appls 
for  better  performance;  inteact 
with  clients  and  end  users  for 
reqs  gathering,  analysis,  planing 
and  implementation;  perform 
debugging  and  modifications  of 
existing  software.  Require:  MS 
or  foreign  equiv.  in  CS  / 
Engg.(any  branch).  F/T.  compet¬ 
itive  salary.  Travel  involved. 
Resumes  to:  HR,  Semafor 
Technologies,  Inc.,  3300, 
Holcomb  Bridge  Road,  Ste  212, 
Norcross,  GA  30092. 


Systems  Software  Engineer.  8a- 
5p,  40hrs/wk.  Analyze,  dsgn, 
test,  support  &  install  LAN/WAN, 
n/works,  data  communication 
systms,  servers  &  workstations; 
recommend  n/work  h/ware  & 
s/ware;  perform  interface  using 
n/work  mgmt,  CISCO  routers, 
TCP/IP,  Ethernet,  VLSI  tools  & 
WinNT.  2  yrs  exp.  in  job  offd  or 
as  IT  profl  using  above  comput¬ 
er  skills  reqd.  Masters  or  equiv 
in  Comp  Sci,  Info  Systms, 
Electrical,  Electronics  or  related 
field  of  Engg  reqd.  (In  lieu  of 
Masters,  Bach  in  specified 
majors  &  5  yrs  work  exp  as  IT 
profl  accepted.)  Resume: 
Software  Decisions  Group,  Inc., 
235  Donamere  Way,  Alpharetta, 
GA  30022. 


SENIOR  SOFTWARE  ENGIN¬ 
EER  to  design,  develop,  modify 
and  support  Computer  System/ 
apps  software.  Analyze  user 
needs,  design  databases,  devel¬ 
op  software  solutions  using 
Enterprise  Resource  Planning  & 
related  software  using  SAP, 
SQL,  MAPICS  and  MS  Access 
skills.  Require:  Master's  degree 
in  an  Engineering  discipline, 
Business  or  closely  related  field 
with  2  years  of  experience  in  job 
offered  or  as  a  system  analyst. 
Extensive  travel  within  the  U.S. 
Salary  offered  $72000/yr,  40  hrs/ 
week,  8  a.m.  -  5  p.m.  Submit 
resumes  to:  Shri  Gangal,  Syspro 
Technologies,  Inc.  17440  Dallas 
Parkway,  Suite  207,  Dallas  TX 
75287. 


PROGRAMMER  ANALYSTS 
req'd  for  Chicago,  IL  office. 
Design  &  Develop  software  ap¬ 
plications  using  C,  C++,  VB, 
Delphi,  ASP,  XML,  UML,  Cool¬ 
gen,  Interwoven,  Oracle,  PL/ 
SQL,  Developer  2000  &  De¬ 
signer  2000;  Perform  system  & 
integration  testing.  Bachelors  or 
Equivalent  req'd  in  Computers, 
Engineering,  math  or  related 
field  of  study  +2  yrs  of  related 
exp.  40  hrs/wk.  Must  have  legal 
authority  to  work  permanently  in 
the  U.S.  Send  resume  to  HR 
Manager,  Allied  Business  Con¬ 
sulting,  Inc.,  8700  W.Bryn  Mawr, 
Suite  800  South,  Chicago,  IL 
60631. 


Programmer  Analysts  to  ana¬ 
lyze,  design  s/w  appls  using 
SAP  R/3,  ABAP/4,  C,  C++, 
Java,  VB,  JSP,  JScript,  HTML 
on  UNIX/Windows  os;  gath¬ 
er/document  reqs  from  user 
community;  test/troubleshoot 
project  appl  code  according  to 
system  objectives.  Require  a 
B.S.  or  foreign  equiv  in  CS/ 
Engg  (any  branch)with  2  yrs 
exp  in  IT.  High  salary.  F/T. 
Travel  involved.  Resume  to 
HR,  Smartsoft  International, 
Inc.,  4898,  South  Old 
Peachtree  Rd,  Norcross,  GA 
30071. 


Data  Communication  An¬ 
alyst  needed  for  law  firm, 
4  years  experience  in 
duties  or  B.S.  in  Systems 
Engineering  (Computer 
Science).  Please  send 
resume  to:  contact@ 
casablancalaw.com  or 
Attn:  Human  Resources, 
Casablanca  &  Associ¬ 
ates,  P.  A.,  444  Brickell 
Ave,  616,  Miami,  Florida 
33131. 


Mphasis  Corporation  has  mul¬ 
tiple  openings  for  the  follow¬ 
ing  positions  at  its  offices  in 
New  York,  NY,  Memphis,  TN, 
Houston,  TX  and  unanticipat¬ 
ed  client  sites  throughout  the 
U.S.:  Programmer  Analyst, 
Software  Engineer,  Project 
Manager,  Management  An¬ 
alyst,  Sales  Engineer,  Busin¬ 
ess  Development  Manager, 
Finance  Manager.  Please 
send  resume,  salary  history 
and  position  applied  for  to  444 
Park  Avenue  South,  Suite 
#503,  New  York,  NY  10016, 
Attn:  H.R.  Manager. 


Seeking  qualified  applicants  for 
the  following  positions  in  Orlando, 
FL:  Senior  Programmer  Analyst, 
Formulate/define  functional  req¬ 
uirements  and  documentation 
based  on  accepted  user  criteria. 
Requirements:  Bachelor's  degree 
or  equivalent*  in  computer  sci¬ 
ence,  MIS,  mathematics,  engi¬ 
neering  or  related  field  plus  5 
years  of  experience  in  systems/ 
applications  development.  Exp¬ 
erience  with  C  and/or  C++,  Java 
and  RDBMS  also  required. 
“Master's  degree  in  appropriate 
field  will  offset  2  years  of  general 
experience.  Submit  resumes  to 
Sibl  George,  FedEx  Corporate 
Services,  1900  Summit  Tower 
Blvd.,  Suite  1400,  Orlando,  FL 
32810.  EOE  M/F/D/V. 


Software  Engineers  needed: 
Req:  BS  degree  or  equivalent 
and/or  rel.  work  exp.  Part  of  the 
req.  rel.  work  exp.  must  include 
2  years  working  with  Oracle  and 
1  year  working  with  Java.  Exp. 
can  be  simultaneous.  Analyze, 
design  and  implement  systems 
and  applications;  provide  engi¬ 
neering  solutions;  develop  soft¬ 
ware.  Work  with  Oracle  RDBMS, 
Java,  XML,  SQL  and  PL/SQL. 
Mail  resume,  transcripts,  refer¬ 
ences  and  salary  requirements 
to:  NewGen  Technologies,  Inc., 
405  Kelsey  Park  Drive,  West 
Palm  Beach,  FL  33410. 


I.T.  BUSINESS  CONSUL¬ 
TANT-  manage  all  info,  sys¬ 
tems  &  tech,  related  busi¬ 
ness  needs  for  predomi¬ 
nantly  Spanish  speaking 
clientele.  B.S.  Computer 
Sci.  or  equiv  +  2  yr  in  job  or 
in  info  systems  &  fluency  in 
Spanish  reqd.  Proficiency  in 
Windows  NT,  Microsoft 
applications  &  Lotus  Notes 
&  Domino  platforms.  Apply 
to:  World  Business  Consult¬ 
ants,  Inc.  1191  Hiddenbrook 
Ln,  Suwanee,  Ga  30024. 


Prog  Analyst  needed  to  ana¬ 
lyze,  design,  implement  and 
test  proprietary  s/w  apps  w / 
exp  in  Java,  Borland  C/C++, 
MS  SQL,  ASP,  ActiveX, 
HTML,  VB.  Ability  to  design 
and  develop  conversion/ 
interface  processes  between 
proprietary  s/w  apps  and 
WONDA,  I  LX,  Bloomberg 
DDE  Server,  Prime  Access, 
P&L  Link  is  necessary.  Send 
resumes  to:  Watchpoint 
Asset  Management,  74  DW 
Hwy,  Merrimack,  NH  03054. 


Software  Engineer 
InterContinental  Hotels  Group 
is  seeking  qualified  applicants 
for  positions  at  the  company’s 
North  American  headquarters 
in  Atlanta.  Develop  real-time 
revenue  management  applica¬ 
tions  for  use  in  multi-platform 
environment.  Requires  rele¬ 
vant  degree  and  experience 
with  revenue  management 
systems  for  hospitality/tourism 
industry.  Apply  to  Francene 
Taylor,  Six  Continents  Hotels, 
Inc.,  Three  Ravinia  Drive, 
Suite  100,  Atlanta,  Georgia 
30346. 


Information 
Overload  ? 


Take  a  break  at 
itcareers.com 
and  take  the 
hassle  out  of  job 
searching! 


\vw\v.  itcarcLTs.com 


IT  Education  &  Training  Directory 

Contact  the  companies  listed  below 


to  help  you  with  your  training  needs! 


To  place  your  ad  please  call  800-762-2977 


IPexpert,  Inc. 

(866)  225-8064 

www.ipexpert.com 

CCIE  (R&S,  SEC,  and  C&S),  CCSP, 

CCNP,  CCNA,  IP  Telephony 


CBT  Nuggets 

(888)  507-6283  &  (541)  284-5522 
www.cbtnuggets.com 
Affordable  training  videos  on  CD 
MCSE,  MCDBA,  MCSD,  CCNA, 
Citrix,  Linux,  A+,  Net  + 
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The  World  Of 
Work  Is  Changing 
Every  Week. 


_ H ■  ■  -  ■  _ I _ I 

Luckily,  We  Are  Too! 


itcareers.com  is  now 

powered  by 
CareerJournal.com! 

Search  for  jobs  and  post 
your  resume  here  on 
www.itcareers.com 

or  call:(800)  762-2977 


SENIOR  SOFTWARE  ENGIN¬ 
EER  to  design,  develop  and 
implement  interfaces  to  build 
custom  solutions  using  MS 
DNA,  .NET  architecture;  Design 
and  develop  n-tier  web-based 
application  software  using  C #, 
VB.NET,  ASP.NET,  .NET  Web 
Services,  SQL  Server  2000, 
COM,  DCOM  and  COM+;  De¬ 
velop  databases  by  designing 
queries  and  writing  stored  pro¬ 
cedures  using  T-SQL.  Require: 
Bachelor's  degree  in  Computer 
Science,  an  Engineering  disci¬ 
pline,  Electronics,  or  a  closely 
related  field  with  5  yrs  of  pro¬ 
gressively  responsible  exp  in  the 
job  offered  or  as  a  Programmer/ 
Analyst  or  Programmer.  Exten¬ 
sive  travel  on  assignments  to 
various  client  sites  within  the 
U.S.  is  required.  Competitive 
salary  offered.  Apply  by  resume 
to:  Mayte  Fernandez,  Momen¬ 
tum  Consulting  Corp.,  7725 
N.W.  48th  Street,  Suite  100, 
Miami,  FL  33166;  Attn:  Job  JP. 


Immediate  opportunities  for  both 
entry-level  and  experienced 
Programmers,  Programmer  An¬ 
alysts,  Systems  Analysts,  Soft¬ 
ware  Engineers,  DBA's  and 
Software  Consultants  with  three 
or  more  of  the  following  skills: 
Java,  Shell  Scripts,  SAS,  PLC, 
Textra,  XML,  SQL,  DB2,  mq- 
PCX,  Oracle,  PowerBuilder, 
Rational  Rose,  Sybase,  Perl, 
PeopleSoft,  Crystal  Enterprise, 
Crystal  Reports,  Teradata  &  MS 
Visual  Studio.  Bachelor's  or 
Master's  degree  reqd.,  depend¬ 
ing  on  position.  1  yr  exp  reqd. 
depending  on  position  We  also 
accept  the  foreign  edu.  equiv.  of 
the  degree,  or  the  degree  equiv. 
in  edu.  and  exp.  Frequent  travel 
and  relocation.  Send  confiden¬ 
tial  rbsumb  and  salary  require¬ 
ments  to:  HR,  Transworld,  Inc 
1515,  Woodfield  Road,  Ste.  625, 
Schaumburg,  IL,  60173  Visit  our 
website  at  www.transwld.com. 


Senior  Software  Engineer.  Req. 
Bachelor's  degree  (or  equiv.  for¬ 
eign  educ.)  in  Computer 
Science  or  Electronic  Eng.  and 
1  year's  exp.  in  the  job  offered  or 
1  year’s  exp.  developing  interac¬ 
tive  web-based  apps.  util,  serv¬ 
er-side  JAVA  &  Coldfusion.  All 
stated  experience  must  include 
use  of  XML  and  InstallShield  to 
deploy  web-based  applications. 
Must  have  experience  in  devel¬ 
opment  of  interactive  web-based 
e-learning  applications.  Deve¬ 
lop  interactive  web-based  e- 
learning  applications  utilizing 
server-side  JAVA  &  Coldfusion. 
Enhance  and  develop  e-learning 
applications  and  deployment 
software.  40  hrs./wk.  Apply  with 
resume  to:  SkillSoft  Corporation, 
Attn:  Jennifer  Soldner,  20 
Industrial  Park  Drive,  Nashua, 
NH  03062. 


Sr.  Database  Programmer  - 
Analyze,  design  and  develop 
database  computer  systems, 
using  Transact-SQL  Stored 
procedures.  Provide  support 
and  training  on  programmed 
system  modules  BS  in  Informa¬ 
tion  Systems  +  2  years  experi¬ 
ence  in  database  development 
and  administration,  or  MS  in 
Information  Systems.  Competi¬ 
tive  salary.  Please  send  res¬ 
ume  to  ByDesign  Technologies, 
Inc.  3901  Coconut  Palm  Drive, 
Suite  117,  Tampa,  FL  33619. 
No  phone  calls  please.  Equal 
Opportunity  Employer. _ 
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Information  Analyst 

Apply  and  maintain  nuclear 
power  plant  software  applica¬ 
tions  including  NUMAD  (Nuclear 
Materials  Accounting  Database) 
to  develop  and  maintain  the 
nuclear  plant  technology  sys¬ 
tem;  perform  emergency  testing 
drills  on  nuclear  plant  software 
to  ensure  functioning;  analyze 
and  assess  work  planning  and 
implementation  system  for  busi¬ 
ness  operators  to  direct  engi¬ 
neers  to  perform  maintenance 
on  nuclear  plant  equipment; 
plan,  design  and  implement  soft¬ 
ware  systems  to  support  man¬ 
agement  planning  activities;  rec¬ 
ommend  and  engage  new  busi¬ 
ness  opportunities  for  the  nuc¬ 
lear  plant  in  the  technology  area; 
ensure  that  all  nuclear  plant  soft¬ 
ware  systems  are  current  so  that 
clients  projects  comply  with 
industry  regulations;  supervise 
and  lead  teams  to  implement 
client  projects  and  ensure  pro¬ 
ject  deliverables  are  met.  Re¬ 
quires  Bachelors  in  Computer 
Science  or  Management  Infor¬ 
mation  Systems  plus  1  yr.  exp. 
in  job  or  1  yr.  exp.  in  applying 
and  maintaining  nuclear  power 
plant  application  NUMAD  to  de¬ 
velop  and  maintain  nuclear  plant 
technology  system.  40  Hrs./wk., 
$52,423.00/Yr.  Must  have  proof 
of  legal  authority  to  work  in  the 
United  States.  Send  your  res¬ 
ume  to  the  Iowa  Workforce 
Center,  800  7th  Street,  SE, 
Cedar  Rapids,  Iowa  52406- 
0729.  Please  refer  to  Job  Order 
iA1 101782.  Employer  paid 
advertisement. 


PROGRAMMER/ANALYST  to 
provide  technical  production 
support  for  PeopleSoft  Version 
7.5x  financial  applications,  in¬ 
cluding  GL,  AP,  Asset  Manage¬ 
ment,  and  Project  Costing  & 
Purchasing.  Design,  develop, 
and  maintain  various  systems 
using  various  management 
and  development  tools  and 
techniques  including  People- 
Soft,  SQL  Server,  Windows  NT 
/2000,  IIS,  Visio,  VSS,  Visual 
Interdev,  and  Visual  Basic. 
Require:  B.S.  degree  in  Com¬ 
puter  Science/Engineering/ 
Management  Information  Sys¬ 
tem/Math  or  a  closely  related 
field  with  three  years  of  experi¬ 
ence  in  the  job  offered  or  as  a 
Programmer/Software 
Engineer/DBA  or  equivalent. 
Extensive  travel  on  assign¬ 
ments  to  various  client  sites 
within  the  U.S.  is  required. 
Salary:  $85,301  per  year,  9:00 
am  to  6:00  pm,  M-F.  Contact: 
Anu  Singh,  eSynaxis  Interna¬ 
tional,  Inc.,  3922  Riversong 
Court,  Suwanee,  GA  30024. 
Attn:  Job  IS. 


Programmer.  Job  location:  Cin¬ 
cinnati,  OH.  Duties:  Develop 
client  server  appls.  for  system 
using  Visual  C++  &  Sybase. 
Perform  software  programming 
for  business  appls.  incl.  modifi¬ 
cation  requirements  &  version 
upgrades.  Implement  SQL  com¬ 
mands,  stored  procedures  & 
triggers  in  Sybase  database 
environ.  Requires:  B.S.  in 
Comp.  Sci.,  Eng.  or  related  field 
&  2  yrs.  exp.  in  the  job  offered  or 
2  yrs.  exp.  as  a  Prog./Analyst  or 
Analyst.  Concurrent  exp.  must 
incl.  2  yrs.  exp.  developing  client 
server  appls.  40  hrs./wk.;  8:00 
a.m.  to  5:00  p.m.  Send  resume 
(no  calls)  to:  Bob  Miller,  CTG 
Inc.,  312  Plum  St.,  Ste.  700, 
Cincinnati,  OH  45202-2618. 


Sr.  Software  Engineer  - 
Harleysville,  PA.  Job  entails  and 
requires  experience  in  child  sup¬ 
port  industry  including  experi¬ 
ence  in  design,  development 
and  implementation  of  applica¬ 
tions  using  SQL  Server,  C++, 
Delphi,  Pervasive,  Crystal 
Reports,  Attachmate  Extra, 
Unisys  NDP  series  and 
Kliendienst  series.  Relocation 
within  USA  possible.  Attractive 
compensation  package.  Send 
resume  to  HR.  Immergent 
Technologies,  2290  Skyview 
Drive,  Harleysville,  PA  19438. 


Business  Objects  has  an  open¬ 
ing  for  the  position  of  Sr. 
Consultant  to  be  based  out  of 
our  San  Jose,  CA  office. 

The  position  requires  a 
Bachelor's  or  foreign  degree 
equivalent  in  CS/IS/Business  or 
related  field  plus  five  years  of 
work  experience  as  IT,  software 
consulting  or  related.  The  job 
duties  include:  Implement,  ana¬ 
lyze,  design  and  delivery 
Business  Objects  Decision 
Support  Systems  for  F 1 000  cus¬ 
tomers.  Complement  the  ser¬ 
vice  offerings  of  consulting  firms, 
systems  integrators,  and  large 
customer  personnel  in  architect¬ 
ing,  designing,  Implementing, 
and  integrating  business  solu¬ 
tions  in  the  enterprise.  Identify 
all  technical  requirements  within 
assigned  account  for  delivering 
the  solutions  directly  and  for 
working  with  corporate  support 
personnel,  sales  management, 
and  the  Field  Sales  personnel  to 
resolve  any  technical  issues  or 
requirements.  Provide  techni¬ 
cal  solutions  to  customers  while 
identifying  new  opportunities. 
Travel  extensively  throughout 
the  U.S. 

To  apply  for  a  position,  visit  our 
website  at  www.businessob- 
jects.com/careers  or  forward 
your  resume  (ref  CW0304)  to: 
Business  Objects  Americas, 
Attn:  Staffing,  3030  Orchard 
Pkwy,  San  Jose,  CA  95134. 
EOE 


Full-time  Business  Intelligence 
Developer.  Duties  include  BCA 
scheduling,  UNIVERSE  devel¬ 
opment,  server  cluster  adminis¬ 
tration.  Analyze  and  build  data 
universes  and  reports.  Deploy- 
-ment  of  Business  Objects 
reports  through  Web  Intell¬ 
igence.  Job  responsibilities 
include  maintaining  users  and 
supporting  existing  report  cata¬ 
log.  Maintain  the  BCA  Server 
schedule.  Responsible  for  the 
maintenance  and  generation  of 
reporting  worksheets  that  are 
delivered  via  Excel.  Work  with 
Universe  development,  BCA 
Scheduling,  Business  Objects 
development,  Oracle  PL/SQL, 
Excel  Analysis,  development  of 
Bl  systems  in  data  warehousing, 
VBA  Macro  Coding  in  Business 
Objects,  Application  Foundation 
3.x/6.x,  Web  Intelligence  Server 
Administration  6.x,  Business 
Objects  Supervisor  (5.x,  6.x), 
Web  Intelligence  SDK  using 
Java  Server  Pages  (JSP),  Data 
Warehousing  Methodology  and 
Dimensional  Modeling,  PL/SQL. 
T-SQL,  Microsoft  SQL  and 
Oracle.  Must  have  a  Bachelors 
Degree  in  Management.  Foreign 
degree  equivalent  accepted. 
Must  have  5  years  of  experience 
in  job  offered  or  position  with 
same  duties.  Send  resume  to: 
Kim  Brown,  245  Perimeter 
Center  Parkway,  Ste.  600, 
Atlanta,  GA  30346. 


Software  engineer  to  design, 
develop  and  test  computer  pro¬ 
grams  for  business  applications; 
analyze  software  requirements 
to  determine  feasibility  of  de¬ 
sign;  direct  software  system 
testing  procedures  using  exper¬ 
tise  in  J2EE,  Struts,  MQ  Series, 
WebLogic  and  EJB.  Require¬ 
ments:  Bachelor's  Degree  or 
equivalent  in  Computer  Science 
or  related  field  and  two  years 
experience  as  a  software  engi¬ 
neer  or  computer  programmer, 
knowledge  of  J2EE,  Struts,  MQ 
Series.  WebLogic  and  EJB 
Salary:  $78, 500/year.  Working 
Conditions:  8:00  A.M.  to  5:00 
P.M.,  40  hours/week,  involves 
extensive  travel  and  frequent 
relocation.  Apply:  Site  Manager, 
Armstrong  County  CareerLink, 
1270  North  Water  Street.  PO 
Box  759,  Kittanning,  PA  16201, 
Job  No.  WEB409565. 
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Patches 

hearts,”  said  Kamens,  who  had 
to  patch  more  than  4,000  Win¬ 
dows  systems  last  week  at  the 
Waltham,  Mass.-based  scien¬ 
tific  equipment  manufacturer. 

Among  the  flaws  considered 
particularly  dangerous  was  a 
buffer  overrun  vulnerability  in 
a  user  authentication  function 
called  the  Local  Security  Au¬ 
thority  Subsystem.  Hackers 
who  successfully  exploit  the 
flaw  could  take  complete  con¬ 
trol  of  compromised  systems. 


A  buffer  overrun  flaw  related 
to  a  component  used  to  secure 
communications  between  serv¬ 
ers  and  clients  on  public  net¬ 
works  was  also  deemed  a  criti¬ 
cal  risk,  for  the  same  reason. 

Both  flaws  present  “high- 
value  targets”  for  hackers  be¬ 
cause  they  involve  security 
and  authentication  compo¬ 
nents  in  Windows,  said  Neel 
Mehta,  a  research  engineer  at 
Internet  Security  Systems  Inc. 
in  Atlanta.  “I  expect  [the 
flaws]  to  be  exploited  in  a  very 
short  time,”  Mehta  said. 

Southern  Regional  Health 
System  in  Riverdale,  Ga.,  had 


to  patch  nearly  100  Windows 
NT  and  Windows  2000 
servers  last  week. 

“These  announcements 
are  becoming  more  like  the 
Chicken  Little  [story],”  said 
Reid  Burch,  the  health  care  or¬ 
ganization’s  network  services 
manager.  “I’m  not  saying  that 
we’re  ignoring  the  patches. 

But  it  has  become  comical  that 
these  patches  are  released  so 
frequently.” 

Since  the  hospital  has  to 
run  patient  care  applications 
around  the  clock,  the  task  of 
patching  systems  is  very  diffi¬ 
cult,  Burch  added. 


Briar  Patch 


fe  Buffer  overrun  vulnerability  in  the  Local  Security  Authority  Subsystem 
interface:  Critical  for  Windows  2000,  Windows  XP 

%  Buffer  overrun  in  the  Private  Communications  Transport  protocol: 

Critical  for  Windows  NT  4.0  and  Windows  2000 

m  RPC  Runtime  Library  vulnerability:  Critical  for  Windows  2000, 

XP  and  Windows  Server  2003 


Fenwick  &  West  LLP  had  to 
allocate  three  IT  workers  to 
patching  duties  last  week,  and 
by  Thursday,  all  three  were 
working  overtime,  said  Matt 
Kesner,  the  Mountain  View, 
Calif.-based  law  firm’s  chief 
technology  officer. 


Linux  Vendors  Claim  Forrester  Report  Favored  Microsoft 


Four  major  Linux  distributors  have 
sharply  criticized  a  recent  report 
in  which  Forrester  Research  Inc. 
found  that  Microsoft  Corp.  out¬ 
performed  them  in  responding  to 
and  fixing  security  flaws. 

In  a  joint  letter  released  April 
6,  Linux  distributors  Debian, 
MandrakeSoft  Inc.,  Red  Hat  Inc. 
and  SUSE  Linux  A6  questioned 
the  validity  of  Forrester’s  conclu¬ 
sions  and  claimed  that  the  report 
had  “extremely  limited  real-world 
value"  for  users. 

“It’s  bogus  in  its  current  form,” 
said  Joey  Schulze,  a  member  of 
Debian’s  security  team. 

Laura  Koetzle,  the  author  of 
the  Forrester  report,  defended 
her  company’s  analysis  of  the 
data.  All  vendors  studied  in  the 
report  were  measured  equally  us¬ 
ing  publicly  available  vulnerability 
data  and  widely  accepted  vulner¬ 
ability  rating  measures  from  the 
National  Institute  of  Standards 
and  Technology  (NIST),  she  said. 

Cambridge,  Mass.-based  For¬ 
rester’s  report  “Is  Linux  More 
Secure  than  Windows?”  was  re¬ 
leased  on  March  22.  It  looks  at 
how  Microsoft  and  the  four  Linux 
vendors  responded  to  reports  of 
security  flaws  from  June  1, 2002, 
to  May  31, 2003.  Microsoft  ranks 
first  among  the  vendors  for  its 
“responsiveness”  and  its  “thor¬ 
oughness”  in  dealing  with  report¬ 


ed  security  vulnerabilities. 

On  average,  Microsoft  took  25 
days  between  public  disclosure 
and  the  release  of  a  fix,  and  it  was 
the  only  company  to  fix  all  vulner¬ 
abilities,  the  report  stated.  How¬ 
ever,  Microsoft  also  had  the  high¬ 
est  percentage  of  serious  flaws. 

In  contrast,  Moreno  Valley, 
Calif.-based  MandrakeSoft  took 
82  days  on  average  to  issue  fixes 
for  its  Linux  distribution,  the  For¬ 
rester  report  said.  SUSE  took  74 
days,  and  Red  Hat  and  Debian 
each  took  an  average  of  57  days. 

The  Linux  vendors  ranked  low¬ 
er  than  Microsoft  in  terms  of  the 
percentage  of  reported  flaws 
they  fixed.  Red  Hat,  which  fixed 
all  but  one  flaw,  was  closest, 
while  Debian  ranked  last,  fixing 
275  out  of  286  flaws. 

While  the  data  that  the  analysis 
is  based  on  is  accurate,  the  con¬ 
clusions  are  not,  said  Vincent  Da- 
nen,  security  update  manager  at 
MandrakeSoft.  By  measuring  only 
the  time  elapsed  between  public 
knowledge  of  a  security  flaw  and 
the  availability  of  a  vendor's  fix, 
the  study  failed  to  make  a  distinc¬ 
tion  between  the  critical  flaws 
and  the  not-so-severe  ones,  the 
jointly  signed  letter  said. 

Linux  vendors  typically  treat 
flaws  on  a  case-by-case  basis, 
with  high-risk  flaws  getting  a 
higher  priority  than  low-risk  ones, 


Danen  said.  The  response  to  a 
flaw  is  based  on  risk  assess¬ 
ments  made  by  each  distributor 
and  may  not  always  coincide  with 
the  assessment  made  by  a  third 
party  such  as  NIST,  he  said. 

“Our  users  will  know  that  for 
critical  flaws,  we  can  respond 
within  hours,”  SUSE  Linux  said  in 
a  statement.  SUSE  is  now  owned 
by  Novell  Inc. 

By  focusing  purely  on  quanti¬ 
tative  analyses,  the  Forrester  re¬ 
port  fails  “to  differentiate  be¬ 
tween  both  the  seriousness  of 
the  flaws  and,  more  importantly, 
the  quality  of  the  fixes,”  SUSE 
said  in  its  note. 

Making  a  distinction  between 
serious  flaws  and  not-so-serious 
ones  when  devising  a  response 
is  crucial,  said  Joe  Poole,  manag¬ 
er  of  technical  support  at  Bos- 


cov’s  Department  Stores  LLC  in 
Reading,  Pa. 

“[Vendors]  have  to  separate 
the  things  they  need  to  do  tomor¬ 
row  and  what  can  be  done  in  a 
month,”  he  said. 

This  isn’t  the  first  time  that  a 
Forrester  report  comparing  Mi¬ 
crosoft  products  and  Linux  has 
been  criticized.  In  September,  the 
research  firm  drew  criticism  from 
users  over  a  Microsoft-funded 
report  that  concluded  that  Micro¬ 
soft  development  platforms  had  a 
substantial  cost  advantage  over 
Linux/J2EE  for  portal  applica¬ 
tions  [QuickLink  41320], 

But  Koetzle  stressed  that 
her  security  report  had  no  Mi¬ 
crosoft  backing  whatsoever. 
“Microsoft  did  not  pay  for  this 
report,”  she  said. 

-  Jaikumar  Vijayan 


Flaw  Scoreboard 


PLATFORM 


TOTAL 

FLAWS 

HIGH-SEVERITY 

FLAWS 

NUMBER  OF 
FLAWS  FIXED 

286 

162 

275 

199 

120 

197 

128 

86 

128 

229 

128 

228 

176 

111 

172 

Time  frame:  June  1, 2002,  to  May  31, 2003 


Even  so,  the  firm  was  having 
problems  getting  the  patches 
installed,  with  some  machines 
requiring  multiple  attempts 
and  12  PCs  needing  to  be  com¬ 
pletely  reformatted  to  accept 
the  patches. 

“Despite  the  fact  that  Mi¬ 
crosoft  has  made  this  huge 
commitment  to  security,  they 
are  not  saying  why  these  vul¬ 
nerabilities  are  showing  up 
and  what  exactly  they  are  do¬ 
ing  to  research  and  patch 
them,”  Kesner  said.  There  are 
also  questions  about  how  long 
Microsoft  might  have  known 
about  these  vulnerabilities  be¬ 
fore  the  patches  became  avail¬ 
able,  he  said. 

“There  are  more  questions 
asked  than  answered  when 
such  a  large  update  is  re¬ 
leased,”  said  Robert  Bagamery, 
a  systems  support  specialist  at 
a  large  Canadian  utility  that  he 
asked  not  be  named. 

“I  wonder  what  they’ve  bro¬ 
ken  with  the  fix,”  Bagamery 
said.  “I  wonder  how  many 
more  there  are,  and  how  many 
they  know  about  but  aren’t 
talking  [about].” 

Microsoft  didn’t  respond  to 
specific  user  complaints.  But 
Stephen  Toulouse,  security 
program  manager  at  its  Secu¬ 
rity  Response  Center,  said  the 
company’s  decision  to  address 
so  many  flaws  with  a  few  large 
patches  was  driven  by  practi¬ 
cal  considerations. 

“When  we  see  the  opportu¬ 
nity  to  ship  one  set  of  files  that 
contain  multiple  fixes,  we  real¬ 
ly  attempt  to  do  that”  instead  of 
shipping  separate  fixes,  he  said. 

The  approach  makes  it  easi¬ 
er  for  users  to  apply  the  patch¬ 
es,  Toulouse  added.  “It  was 
the  best  solution  for  our  cus¬ 
tomers,”  he  said.  ©  46247 


Periodical  postage  paid  at  Framingham.  Mass.,  and  other  mailing  offices.  Posted  under  Canadian  International  F*ubllcatlon  agreement  #40063800.  CANADIAN  POSTMASTER:  Rease  return  undeliverable  copy  to  PO  Box  1632.  Windsor.  Ontario  N9A  7C9.  Computerworid  (ISSN  0010-4841)  is  published 
weekly,  except  a  single  combined  issue  for  the  last  two  weeks  in  December  by  Computerworid,  Inc.,  500  Old  Connecticut  Path.  Box  9171.  Framingham.  Mass.  01701-9171.  Copyright  2004  by  Computerworid  Inc.  All  rights  reserved.  Computerworid  can  be  purchased  on  microfilm  and  microfiche  through  Uni¬ 
versity  Microfilms  Inc..  300  N.  Zeeb  Road.  Ann  Arbor.  Mich.  48106.  Computerworid  is  indexed.  Back  issues,  if  available,  may  be  purchased  from  the  circulation  department.  Photocopy  rights:  permission  to  photocopy  for  internal  or  personal  use  is  granted  by  Computerworid  Inc.  for  libraries  and  other  users 
registered  with  the  Copyright  Clearance  Center  (CCC),  provided  that  the  base  fee  of  S3  per  copy  of  the  article,  plus  50  cents  per  page,  is  paid  directly  to  Copyright  Clearance  Center,  27  Congress  St..  Salem.  Mass.  01970.  Repnnts  (minimum  100  copies)  and 
permission  to  reprint  may  be  purchased  from  Renee  Smith.  Computerworid  Reprints,  c/o  Reprint  Management  Services.  Greenfield  Corporate  Center.  1808  Colonial  Village  Lane.  Lancaster.  Pa..  17601.  (717)  399-1900.  Ext  172.  Fax:  (717)  399-8900  Web  site: 
www.reprintbuyer.com.  E-mail:  reprints@computerworid.com.  Requests  for  missing  issues  will  be  honored  only  If  received  within  60  days  of  issue  date.  Subscription  rates:  S5  per  copy:  U  S.  -  $99.99  per  year;  Canada  -  $130  per  year.  Central  &  So.  America. 

$250  per  year:  Europe  -  $295  per  year,  all  other  countries  -  $2195  per  year.  Subscriptions  call  toll-free  (888)  559-7327.  POSTMASTER:  Send  Form  3579  (Change  of  Address)  to  Computerworid,  PO  Box  3500.  Northbrook  III.  60065-3500 


iputerworld  Inc.  for  libraries  and  other  users 

BPA  ABM  fe. 


52  COMPUTERWORLD  April  19, 2004 


THE  BACK  PAGE 


ww\Homputerworld.com 


FRANK  HAYES  ■  FRANKLY  SPEAKING 


McWi-R 


IT  SEEMS  LIKE  A  SIMPLE  ENOUGH  DEAL:  Last  week,  fast  food 
chain  McDonald’s  announced  it’s  having  6,000  of  its  U.S.  out¬ 
lets  set  up  for  Wi-Fi  access  (see  story,  page  12).  The  new  hot 
spots  will  let  McDonald’s  customers  link  up  to  the  Internet 
while  they  chow  down,  for  a  mere  $2.95  per  hour.  There’s  noth¬ 
ing  really  new  about  that  —  lots  of  Starbucks  coffee  joints  and  a  few 
Schlotzsky’s  delis  already  offer  Wi-Fi.  And  their  food’s  better,  too. 

The  subtle  difference  at  McDonald’s?  Even  though  a  third  party  — 
Wayport  Inc.  —  will  install  and  run  the  Wi-Fi  network,  McDonald’s 
will  use  the  same  network  for  its  own  cashless  payment  system. 

In  other  words,  instead  of  paying  for  6,000  pricey  wireless  IT  proj¬ 


ects  to  support  cashless  payment,  McDonald’s 
plans  to  get  someone  else  to  do  the  work  —  and 
get  them  to  pay  for  the  privilege. 

Now  that’s  ROI. 

In  effect,  McDonald’s  has  cleverly  turned  out¬ 
sourcing  inside  out.  Instead  of  McDonald’s  pay¬ 
ing  Wayport  to  run  its  wireless  networks.  Way- 
port  pays  for  the  equipment,  installs  it  and  runs 
it.  Then  Wayport  charges  McDonald’s  cus¬ 
tomers  who  use  the  Wi-Fi  network,  and  it  splits 
the  take  with  Mickey  D’s. 

And  McDonald’s  gives  up  a  little  piece  of  that 
revenue  stream  for  the  right  to  use  a  little  piece 
of  the  wireless  bandwidth  for  its  cashless  pay¬ 
ment  system. 

Everybody  comes  out  ahead.  Wayport  gets 
thousands  of  prime  locations  for  its  service. 
McDonald’s  offloads  the  work  of  installing  and 
securing  wireless  networks  and  turns  a  cost 
center  into  a  revenue  stream.  Customers  get  to 
check  e-mail  or  download  MP3s  and  pay  when 
their  Happy  Meals  arrive. 

And  the  rest  of  us?  We  get  a  new  way  of  look¬ 
ing  at  Wi-Fi. 

For  the  past  few  years,  we’ve  been 
fighting  Wi-Fi.  Let’s  face  it,  most 
corporate  IT  people  wish  Wi-Fi  had 
never  been  invented.  We  wish  those 
cheap  wireless  access  points  cost 
$50,000  each,  so  users  wouldn’t  buy 
them,  sneak  them  in  and  connect 
them  to  our  networks.  We  wish  we 
didn’t  have  to  hunt  down  those 
unauthorized  access  points  and 
fight  with  users  to  remove  them. 

And  if  we’ve  actually  adopted 
Wi-Fi  for  some  applications,  we  still 
wish  we  didn’t  have  to  worry  about 
Wi-Fi  security,  Wi-Fi  compatibility 


and  the  fact  that  it’s  so  hard  to  limit  Wi-Fi’s 
range.  It’s  costly,  time-consuming  and  a  big  pain 
—  all  because  we  want  to  keep  outsiders  off  our 
Wi-Fi  networks,  just  as  we  want  to  keep  them 
off  our  wired  networks. 

Now,  let’s  say  we  turn  that  mind-set  inside 
out,  using  the  McDonald’s  model. 

Suppose  that  instead  of  fighting  Wi-Fi,  you 
got  paid  by  a  Wi-Fi  provider  that  ran  a  Wi-Fi 
network  for  you.  What  would  happen  then? 
That  provider  would  get  the  hassles  of  buying 
equipment  and  positioning  antennas  and  secur¬ 
ing  everything. 

Your  employees  could  use  Wi-Fi  through  a 
virtual  private  network  as  part  of  the  deal.  That 
would  wipe  out  any  reason  for  them  to  sneak  in 
their  own  cheap  Wi-Fi  access  points  —  they’d 
be  getting  better  equipment  for  free. 

And  instead  of  trying  to  limit  the  Wi-Fi  hot 
spot’s  range  or  hide  it  from  outsiders,  you’d 
want  everyone  to  know  about  it.  Why?  Because 
every  time  an  outsider  accessed  your  Wi-Fi  net¬ 
work,  you’d  make  money. 

A  pipe  dream?  Maybe,  maybe  not.  True, 

Wi-Fi  users  wish  hot  spots  were 
everywhere.  But  not  every  location 
would  be  profitable  enough  to  a 
Wi-Fi  provider  to  be  worth  the 
trouble.  Whether  you  could  find  a 
Wi-Fi  provider  to  foot  the  bill,  or 
even  split  the  cost,  depends  on 
the  market,  demand  and  location, 
location,  location. 

But  you’ll  never  know  what’s 
possible  until  you  start  thinking 
creatively  about  Wi-Fi.  And  you’ve 
already  got  a  burger-flipping  clown 
as  an  example  of  how  to  turn  Wi-Fi 
problems  inside  out.  ©  46220 


frank  haves,  Computer- 
world’s  senior  news  colum¬ 
nist,  has  covered  IT  for  more 
than  20  years.  Contact  him  at 

frank.hayes@computerworid.com. 


Showing  Off  Like  It’s  1999 

This  internal  audit  director  iikes  to  impress  everyone 
with  his  knowledge,  says  pilot  fish  who  works  with  the 
guy.  So  at  a  VP-ievel  meeting  to  discuss  the  ramifica¬ 
tions  of  the  Sarbanes-Oxley  Act,  the  audit  director  de¬ 
cides  to  show  off.  “All  of  this  Sarbanes-Oxley  work 
reminds  me  of  Y2k,K  he  says.  “When  was  that  again?" 


SHARK 

TANK* 


Dead  Wrong 

Late  one  night  in 
the  late  1980s, 
this  mainframe 
operator  pilot 
fish  needs  to  call  a 
programmer  to  solve  a 
batch-job  problem.  “The 
online  call  list  was  noto¬ 
rious  for  being  out  of 
date,”  fish  says.  But  he 
calls  and  asks  by  name 
for  the  programmer  at 
the  top  of  the  list.  “After 
a  long  pause,  the  woman 
said  the  programmer 
was  dead,”  says  stunned 
fish.  “I  mumbled  that  i 
was  sorry  and  would  call 
the  secondary  program¬ 
mer,  and  hung  up.  Need¬ 
less  to  say,  the  next  day 
our  VP  called  the  VP  in 
programming  to  get  their 
call  lists  up  to  date.” 

Unclear  on 
The  Concept 

H’s  the  late  1970s,  and 
this  data  center  uses 
punch  cards  for  passing 
information  between  job 
steps.  “A  customer  re¬ 
quested  changes  that 
required  more  informa¬ 
tion  to  be  passed  be¬ 
tween  job  steps  than 
can  be  passed  on  a  sin¬ 
gle  card,”  says  analyst 
piioi  issn.  I  tom  nun 
mere  would  d@  addition* 
a!  changes  to  the  pro¬ 
grams  to  allow  for  multi¬ 
card  processing,  and 
that  meant  additional 
charges.  He  said,  'Can’t 
you  just  use  the  same 
card  and  punch  them  on 
the  back?’” 


Very  Clear 
On  the 
Concept 

This  IT  shop 
gets  a  mandate 
in  the  mid-1980s  to  im¬ 
prove  computer-room 
security.  The  proposal: 
Add  security  cameras 
and  a  turnstile  to  dis¬ 
courage  tailgating  when 
an  employee  uses  his 
badge  to  unlock  the 
door.  But  when  the  ar¬ 
chitect  hears  the  idea, 
he  walks  pilot  fish  to  an 
empty  section  of  hallway 
-and  with  one  hard 
kick,  knocks  a  hole  ail 
the  way  into  the  data 
center.  “First,  we  cov¬ 
ered  the  wall  with  metal 
reinforcement,  says 
fish.  “Then  we  returned 
to  the  subject  of  the 
turnstile.” 

Plan?  What  Plan? 

Tne  plan:  As  of  next 
Monday,  all  users’  de¬ 
fault  passwords  will 
be  last  name  plus  the 


Social  Security  number. 
“E-mails  are  dispatched 


upcoming  change  and 


The  reality:  On  Monday, 
the  new  passwords  don't 
work.  As  the  hefo  desk  is 
flooded  with  calls,  late- 
arming  ru  teens  mane 
an  admission:  “That 

too  time-consuming,  so 
we  just  made  everyone’s 
password  password. . 


O  FEED  THE  SHARK!  Send  your  true  tale  of  IT  fife  to 
sharky@computerworid.com.  You  snag  a  snazzy 
Shark  shirt  if  we  use  it.  And  check  out  the  daily  feed,  browse 
the  Sharkives  and  sign  up  for  Shark  Tank  home  defivery  at 
computerworid.com/sharky. 
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IBM  Express  Middleware:  Designed 
and  developed  for  midsize  companies. 

(IBM  muscle  for  less  moolah.) 


MIDDLEWARE  IS  POWERFUL  IBM  SOFTWARE.  The  kind  of  software  that  makes  your  applications  work  better  to  solve 
your  business  problems.  It’s  an  answer.  It's  IBM  DB2?  Lotus?  Tivoli®  and  WebSphere®  And  in  the  form  of  the  IBM  Middleware 
Express  Portfolio,  it’s  now  more  accessible  than  ever  for  midsize  businesses. 

The  IBM  Middleware  Express  Portfolio  is  engineered  to  work  with  your  existing  business  applications  whether  they  run  on 
Windows?  Linux®  or  UNIX®  It’s  engineered  to  be  deployed  by  those  without  computer  science  degrees.  It’s  priced  to  put  a 
smile  on  Accounting’s  face.  It’s  nimble.  Quick.  Flexible. 

Your  technology  will  work  harder  to  meet  the  demands  of  your  customers,  your  business  goals  and  your  industry’s  needs.  It  makes 
your  business  more  responsive  to  the  unforeseen.  Of  course,  all  of  this  is  easy  to  implement,  easy  to  install,  simple  to  maintain.  You 
need  to  learn  more.  To  find  an  IBM  Business  Partner  in  your  area,  visit  ibm.com/software/express 


IBM,  DB2,  Lotus,  Tivoli  and  WebSphere  are  registered  trademarks  or  trademarks  of  International  Business  Machines  Corporation  in  the  United  States  and/or  other  countries.  Linux  is  a  registered  trademark  of  Linus  Torvalds.  Windows  is 
a  registered  trademark  of  Microsoft  Corporation  in  the  United  States  and/or  other  countries.  UNIX  is  a  registered  trademark  of  The  Open  Group  in  the  United  States  and/or  other  countries.  ©  2004  IBM  Corporation.  All  rights  reserved. 


